CVE-2025-6529
Analyzed Analyzed - Analysis Complete
BaseFortify

Publication date: 2025-06-23

Last updated on: 2026-04-29

Assigner: VulDB

Description
A vulnerability was found in 70mai M300 up to 20250611 and classified as critical. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation leads to use of default credentials. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-06-23
Last Modified
2026-04-29
Generated
2026-05-07
AI Q&A
2025-06-24
EPSS Evaluated
2026-05-05
NVD
CVE-2025-6529
EUVD
EUVD-2025-18959
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
70mai m300_firmware to 2025-06-11 (inc)
70mai m300 *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1392 The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability affects the 70mai M300 device's Telnet Service component, allowing an attacker within the local network to exploit the use of default credentials. This means an attacker can gain unauthorized access by using preset usernames and passwords that have not been changed, potentially compromising the device.


How can this vulnerability impact me? :

The vulnerability can lead to unauthorized access to the affected device via Telnet, allowing attackers to potentially control or manipulate the device. This can result in data breaches, loss of device integrity, and disruption of services, especially since the exploit is publicly known and can be executed without user interaction.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart