CVE-2025-61330
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-16

Last updated on: 2025-10-21

Assigner: MITRE

Description
A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network equipment manufacturer H3C. The vulnerability stems from the use of a hard-coded weak password for the root account in the /etc/shadow configuration or even the absence of any password at all. Some of these devices have the Telnet service enabled by default, or users can choose to enable the Telnet service in other device management interfaces (e.g. /debug.asp or /debug_telnet.asp). In addition, these devices have related interfaces called Virtual Servers, which can map the devices to the public network, posing the risk of remote attacks. Therefore, attackers can obtain the highest root privileges of the devices through the Telnet service using the weak password hardcoded in the firmware (or without a password), and remote attacks are possible.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-16
Last Modified
2025-10-21
Generated
2026-05-27
AI Q&A
2025-10-16
EPSS Evaluated
2026-05-25
NVD
CVE-2025-61330
EUVD
EUVD-2025-34787
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
h3c magic_devices *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-259 The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is due to a hard-coded weak password or no password at all for the root account in the /etc/shadow file on all Magic-branded devices from H3C. Some devices have Telnet enabled by default or allow users to enable it, which combined with the weak or absent password, allows attackers to remotely gain root access through the Telnet service.


How can this vulnerability impact me? :

An attacker can remotely access the affected devices with the highest root privileges by exploiting the weak or absent root password via the Telnet service. This can lead to unauthorized control over the device, potentially compromising the network and any data or services relying on these devices.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart