What’s Vulnerable › Vulnerabilities
CVE-2025-5922: Retrievable password hash protecting TSplus admin console
- Severity: medium (CVSS 4.8 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-07-29 · updated 2026-06-17
- Weakness: CWE-522
Description
Access to TSplus Remote Access Admin Tool is restricted to administrators (unless "Disable UAC" option is enabled) and requires a PIN code. In versions below v18.40.6.17 the PIN's hash is stored in a system registry accessible to regular users, making it possible to perform a brute-force attack using rainbow tables, since the hash is not salted. LTS (Long-Term Support) versions also received patches in v17.2025.6.27 and v16.2025.6.27 releases.
Affected products
- TSplus Remote Access: before v18.40.6.17; before v17.2025.6.27; before v16.2025.6.27 — fixed in v16.2025.6.27, v17.2025.6.27, v18.40.6.17
How to fix
Upgrade to a fixed version: TSplus Remote Access v16.2025.6.27, v17.2025.6.27, v18.40.6.17. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-5922 or the next vulnerability affects your stack