A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled.
https://jumo.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-086.json