CVE-2025-20895

Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass…

Low · published February 4, 2025

CVSS v3.1
3.2
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass restrictions of Setupwizard.

The record
Technical detail
CVSS v3.1
3.2 · LOW
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.9th percentile
Published
2025-02-04T07:19Z
EPSS history
Timeline
  • 04 FEB 07:19Z
    Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass…
    cvelistv5