CVE-2025-52492

A vulnerability has been discovered in the firmware of Paxton Paxton10 before 4.6 SR6

High · published July 7, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.1
In the wild
Unconfirmed
What it is

A vulnerability has been discovered in the firmware of Paxton Paxton10 before 4.6 SR6. The firmware file, rootfs.tar.gz, contains hard-coded credentials for the Twilio API. A remote attacker who obtains a copy of the firmware can extract these credentials. This could allow the attacker to gain unauthorized access to the associated Twilio account, leading to information disclosure, potential service disruption, and unauthorized use of the Twilio services.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00409 · 34.1th percentile
Published
2025-07-07T00:00Z
EPSS history
Timeline
  • 07 JUL 00:00Z
    A vulnerability has been discovered in the firmware of Paxton Paxton10 before 4.6 SR6
    cvelistv5