Vulnerabilidades de Lynxtechnology
CVEs publicadas que afetam produtos de Lynxtechnology: 2 registro(s), com severidade, exploração e correções.
CVE-2025-13316
Alta · 8.1
Exploit público CWE-321 19/11/2025
Hard-coded encryption keys in Twonky Server
Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and gain administrator-level access to Twonky Server.
CVE-2025-13315
Crítica · 9.8
Exploit público CWE-420 19/11/2025
Unauthenticated log access in Twonky Server
Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.