CVE-2025-5922
Access to TSplus Remote Access Admin Tool is restricted to administrators (unless "Disable UAC" option is enabled) and requires a PIN code. In versions below v18.40.6.17 the PIN's hash is stored in a system registry accessible to regular users, making it possible to perform a brute-force attack using rainbow tables, since the hash is not salted. LTS (Long-Term Support) versions also received patches in v17.2025.6.27 and v16.2025.6.27 releases.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.8
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.08%
- CWE
- CWE-522, CWE-759
- Published
- 2025-07-29
- Last modified
- 2026-03-13
Affected products
- TSplus TSplus Remote Access
Weakness type
Related vulnerabilities
- CVE-2026-69805 — .NET Elevation of Privilege Vulnerability
- CVE-2026-64918 — Microsoft Office Spoofing Vulnerability
- CVE-2026-81381 — GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
- CVE-2026-77909 — Azure CycleCloud Information Disclosure Vulnerability
- CVE-2026-82070 — Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface
- CVE-2026-86600 — Workload identity attestation generated before login host validation in Snowflake drivers
- CVE-2026-86726 — AVideo through 29.0 Information Disclosure via restreamsActive.json.php
- CVE-2026-61516 — Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint