CVE-2025-5922

published 2025-07-29

CVE-2025-5922: Access to TSplus Remote Access Admin Tool is restricted to administrators (unless "Disable UAC" option is enabled) and requires a PIN code. In versions below…

Priority P4 24 medium 4.8 CVSS 4.0

AV L AC L AT N PR L UI N VC L VI N VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

Access to TSplus Remote Access Admin Tool is restricted to administrators (unless "Disable UAC" option is enabled) and requires a PIN code. In versions below v18.40.6.17 the PIN's hash is stored in a system registry accessible to regular users, making it possible to perform a brute-force attack using rainbow tables, since the hash is not salted.
LTS (Long-Term Support) versions also received patches in v17.2025.6.27 and v16.2025.6.27 releases.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
tsplus	tsplus_remote_access	< v18.40.6.17	v18.40.6.17
tsplus	tsplus_remote_access	< v17.2025.6.27	v17.2025.6.27
tsplus	tsplus_remote_access	< v16.2025.6.27	v16.2025.6.27

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-522 CWE-759