CVE-2025-50122CWE-331

A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with…

High · published July 11, 2025

CVSS v4.0
8.9
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the

password generation algorithm is reverse engineered with access to installation or upgrade artifacts.

The record
Technical detail
CVSS v4.0
8.9 · HIGH
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:L/SA:H
EPSS
0.00227 · 12.7th percentile
Weakness
CWE-331 · Insufficient Entropy
Published
2025-07-11T09:17Z
EPSS history
Timeline
  • 11 JUL 09:17Z
    A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with…
    cvelistv5