CVE-2025-9317CWE-327

CVE-2025-9317

High · published November 15, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

The vulnerability, if exploited, could allow a miscreant with read

access to Edge Project files or Edge Offline Cache files to reverse

engineer Edge users' app-native or Active Directory passwords through

computational brute-forcing of weak hashes.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00102 · 0.9th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2025-11-15T05:15Z
References (3)
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-317-03.json · [email protected]https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2025-006.pdf · [email protected]https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-03 · [email protected]
EPSS history
Timeline
  • 14 NOV 23:49Z
    AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm
    cvelistv5