Access Control Vulnerability in TSplus Remote Access by TSplus

CVE-2025-5922

What is CVE-2025-5922?

An access control vulnerability exists in the TSplus Remote Access Admin Tool, primarily affecting versions prior to v18.40.6.17. The vulnerability allows unauthorized access to sensitive information due to the improper handling of the PIN code's hash, which is stored in an accessible system registry without adequate protection. This oversight facilitates brute-force attacks and exploitation through rainbow tables since the hash is unprotected and not salted. Users of older and Long-Term Support versions must implement available updates to secure their systems effectively.

References