{"id":86586,"date":"2026-03-02T03:29:56","date_gmt":"2026-03-02T03:29:56","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2025-52492-hard-coded-credentials-vulnerability-in-paxton-paxton10-firmware","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-52492-hard-coded-credentials-vulnerability-in-paxton-paxton10-firmware\/","title":{"rendered":"CVE-2025-52492: Hard-Coded Credentials Vulnerability in Paxton Paxton10 Firmware<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

This report discusses CVE-2025-52492, a critical vulnerability discovered in the firmware of Paxton Paxton10 versions prior to 4.6 SR6. This vulnerability is of significant concern as it could potentially lead to unauthorized access, information disclosure, and disruption of services. The vulnerability lies in the hard-coded credentials for the Twilio API found in the firmware file, rootfs.tar.gz.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-52492
\nSeverity: High (7.5 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Unauthorized access, information disclosure, potential service disruption, and unauthorized use of Twilio services.<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Paxton Paxton10 Firmware | Versions before 4.6 SR6<\/p>\n

How the Exploit Works<\/strong><\/p>\n

An attacker who obtains a copy of the vulnerable firmware can extract the hard-coded credentials for the Twilio API. These credentials can then be used to gain unauthorized access to the associated Twilio account. This could lead to a variety of impacts, including information disclosure, potential service disruption, and unauthorized use of the Twilio services.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Consider an attacker obtaining a copy of the firmware and running the following command to extract the hard-coded credentials:<\/p>\n

tar -xvf rootfs.tar.gz | grep -i 'Twilio'<\/code><\/pre>\n
This command would extract the contents of the firmware file and search for any instances of ‘Twilio’, potentially revealing the hard-coded credentials.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview This report discusses CVE-2025-52492, a critical vulnerability discovered in the firmware of Paxton Paxton10 versions prior to 4.6 SR6. This vulnerability is of significant concern as it could potentially lead to unauthorized access, information disclosure, and disruption of services. The vulnerability lies in the hard-coded credentials for the Twilio API found in the firmware […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-86586","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t