← volver
CVE-2025-57789mediumCWE-257

Vulnerability in Initial Administrator Login Process

28Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendcvss 5.3epss 1.1%
probabilidad de explotación
1.1%top 36% de las CVE
explotación observada
noninguna fuente lo reporta
During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Productos afectados
Commvault · CommCell