What is CVE-2025-52492?

CVE-2025-52492 is a high-severity vulnerability in N/a, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2025-07-07.

How severe is CVE-2025-52492?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in N/a

CVE-2025-52492

A vulnerability has been discovered in the firmware of Paxton Paxton10 before 4.6 SR6. The firmware file, rootfs.tar.gz, contains hard-coded credentials for the Twilio API. A remote attacker who obtains a copy of the firmware can extract these credentials. This could allow the attacker to gain unauthorized access to the associated Twilio account, leading to information disclosure, potential service disruption, and unauthorized use of the Twilio services.

EPSS: 0.004 (28.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

Frequently asked questions

What is CVE-2025-52492?: CVE-2025-52492 is a high-severity vulnerability in N/a, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2025-07-07.
How severe is CVE-2025-52492?: High severity. CVSS v3 base score is 7.5 out of 10.