CVE-2025-3321CWE-798

Use of Hard-coded Credentials in OnlineSuite

Critical · published June 6, 2025

CVSS v4.0
9.4
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

A predefined administrative account is not documented and cannot

be deactivated. This account cannot be misused from the network, only by local

users on the server.

The record
Technical detail
CVSS v4.0
9.4 · CRITICAL
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00165 · 5.5th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-06-06T08:12Z
EPSS history
Timeline
  • 06 JUN 08:12Z
    Use of Hard-coded Credentials in OnlineSuite
    cvelistv5