CVE-2005-4589: Spb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which allows loc...

Security readout for executives and security teams

Spb Kiosk Engine 1.0.0.1 reportedly stored the administrator passcode in plaintext in the registry. A local user could recover that passcode and bypass intended kiosk controls. This matters mainly where the old kiosk software is still deployed on shared or managed devices. Exposure is likely limited to environments still running Spb Kiosk Engine 1.0.0.1 on devices where untrusted or low-privileged users have local access. The supplied affected metadata is incomplete and lists n/a values. Treat as a targeted cleanup item for legacy kiosk environments, not an internet-wide emergency. Prioritize quickly if kiosks are shared, physically accessible, or used to enforce access controls. Mitigation focus: Inventory devices for Spb Kiosk Engine 1.0.0.1 installations.; Check vendor or archived advisory guidance for updates or supported workarounds.; Restrict local access to affected kiosk devices until remediated..

Prepared

Jun 29, 2026, 15:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.