Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-5922— Retrievable password hash protecting TSplus admin console

Quick assessment

Affected
TSplus TSplus Remote Access
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

TSplus Remote Access Admin Tool是法国TSplus公司的一个用于集中配置和管理TSplus远程访问服务器的工具。 TSplus Remote Access Admin Tool v18.40.6.17之前版本存在安全漏洞，该漏洞源于未加盐的PIN哈希存储在可访问的系统注册表中，可能导致暴力破解攻击。

AI Predicted 7.5 Difficulty: Easy EPSS 0.08% · P0
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-5922

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Retrievable password hash protecting TSplus admin console
Source: CVE Program / CVE List V5
Vulnerability Description
Access to TSplus Remote Access Admin Tool is restricted to administrators (unless "Disable UAC" option is enabled) and requires a PIN code. In versions below v18.40.6.17 the PIN's hash is stored in a system registry accessible to regular users, making it possible to perform a brute-force attack using rainbow tables, since the hash is not salted. LTS (Long-Term Support) versions also received patches in v17.2025.6.27 and v16.2025.6.27 releases.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的凭证保护机制
Source: CVE Program / CVE List V5
Vulnerability Title
TSplus Remote Access Admin Tool 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TSplus Remote Access Admin Tool是法国TSplus公司的一个用于集中配置和管理TSplus远程访问服务器的工具。 TSplus Remote Access Admin Tool v18.40.6.17之前版本存在安全漏洞，该漏洞源于未加盐的PIN哈希存储在可访问的系统注册表中，可能导致暴力破解攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
TSplus TSplus Remote Access 0 ~ v18.40.6.17 -

II. Public POCs for CVE-2025-5922

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-5922

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: TSplus Remote Access
Same vendor: TSplus
Same weakness: CWE-522

V. Comments for CVE-2025-5922

No comments yet

Leave a comment