CVE Vulnerabilities

CVE-2025-64305

Cleartext Storage in a File or on Disk

Published: Jan 07, 2026 | Modified: Jan 08, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal.

Weakness

The product stores sensitive information in cleartext in a file, or on disk.

References