CVE-2025-41731 — Jumo: Insufficient entropy in PRNG may lead to root access
A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generati…
Published: 2025-11-10 · CVSS: 7.4 · CVSS 3.1
A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7