PT-2025-25416

CVE-2025-28388

·

Published

2025-06-13

·

Updated

2025-10-27

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions OpenC3 COSMOS version 6.0.0
Description The issue is related to hardcoded credentials for the Service Account.
Recommendations For OpenC3 COSMOS version 6.0.0, consider changing the hardcoded credentials for the Service Account to unique, secure credentials to mitigate the risk of unauthorized access.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-798: Use of Hard-coded Credentials
Related identifiers
CVE-2025-28388
PYSEC-2025-258
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com