critical9.8
CVE-2025-13315
Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw.
Impact
Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lynxtechnology | Twonky Server | Version 8.5.2 |