CVE-2025-54303

thermofisher torrent suite software

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2025-54303

Katalog CVE

CVSS 9.8 · Critical EPSS 0,39%

Kerentanan Use of Default Credentials pada thermofisher torrent suite software. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP.

Deskripsi (NVD)

The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API. The ionadmin user account can be used to authenticate to default deployments with the password ionadmin. The user guide recommends changing default credentials; however, a password change policy for default administrative accounts is not enforced. Many deployments may retain default credentials, in which case an attacker is likely to be able to successfully authenticate with administrative privileges.

Rincian

Terbit di NVD
4 Desember 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-1392: Use of Default Credentials
EPSS (30 hari)
0,39% peluang dieksploitasi; lebih tinggi dari 30,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
thermofisher torrent suite software Versi 5.18.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.