CVE-2025-5922: Retrievable password hash protecting TSplus admin console
Access to TSplus Remote Access Admin Tool is restricted to administrators (unless "Disable UAC" option is enabled) and requires a PIN code. In versions below v18.40.6.17 the PIN's hash is stored in a system registry accessible to regular users, making it possible to perform a brute-force attack using rainbow tables, since the hash is not salted. LTS (Long-Term Support) versions also received patches in v17.2025.6.27 and v16.2025.6.27 releases.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5922?
CVE-2025-5922 is rated as a high severity vulnerability due to the potential for brute-force attacks on the PIN code.
How do I fix CVE-2025-5922?
To mitigate CVE-2025-5922, update TSplus Remote Access Admin Tool to version 18.40.6.17 or later.
Who is affected by CVE-2025-5922?
Users of TSplus Remote Access Admin Tool versions below 18.40.6.17 and certain versions of TSplus Long-Term Support are affected by CVE-2025-5922.
What vulnerability does CVE-2025-5922 exploit?
CVE-2025-5922 exploits the insecure storage of PIN code hashes in the system registry accessible to normal users.
Is there a workaround for CVE-2025-5922 before applying the fix?
Disabling the 'Disable UAC' option may provide temporary mitigation against CVE-2025-5922, but upgrading is strongly recommended.