BaseFortify

Publication date: 2025-10-21

Last updated on: 2025-10-22

Assigner: MITRE

Description

Improper authentication in the web-based management interface of NETLINK HG322G V1.0.00-231017, allows a remote unauthenticated attacker to escalate privileges and lock out the legitimate administrator via crafted HTTP requests.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-21

Last Modified

2025-10-22

Generated

2026-07-06

AI Q&A

2025-10-21

EPSS Evaluated

2026-07-05

NVD

CVE-2025-60772

Affected Vendors & Products

Vendor	Product	Version / Range
netlink	hg322g	1.0.00-231017

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper authentication issue in the web-based management interface of NETLINK HG322G V1.0.00-231017. It allows a remote attacker who is not authenticated to escalate their privileges and lock out the legitimate administrator by sending specially crafted HTTP requests.

Impact Analysis

An attacker exploiting this vulnerability can gain higher privileges without authentication and potentially lock out the legitimate administrator from managing the device, leading to loss of control and possible unauthorized changes to the device configuration.

Hi! I’m here to help you understand CVE-2025-60772. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70