BaseFortify

Publication date: 2025-12-04

Last updated on: 2026-07-05

Assigner: MITRE

Description

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-04

Last Modified

2026-07-05

Generated

2026-07-06

AI Q&A

2025-12-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-29268

Affected Vendors & Products

Vendor	Product	Version / Range
allnet	all-rut22gw_firmware	3.3.8
allnet	all-rut22gw	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability involves the ALLNET ALL-RUT22GW version 3.3.8 storing hardcoded credentials within the libicos.so library. Hardcoded credentials are fixed usernames and passwords embedded in the software code, which can be extracted and misused by attackers.

Impact Analysis

The presence of hardcoded credentials can allow unauthorized users to gain access to the affected device or system, potentially leading to unauthorized control, data breaches, or further exploitation of the network.

Hi! I’m here to help you understand CVE-2025-29268. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70