CVE Intelligence

Vulnerabilidades do Lynxtechnology Twonky Server

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Lynxtechnology Twonky Server: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:lynxtechnology:twonky_server

CVE-2025-13316 Alta · 8.1 Exploit público CWE-321 19/11/2025
Hard-coded encryption keys in Twonky Server
Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and gain administrator-level access to Twonky Server.
CVE-2025-13315 Crítica · 9.8 Exploit público CWE-420 19/11/2025
Unauthenticated log access in Twonky Server
Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.