CVE-2025-2766
Last modified
CVE-2025-2766 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. 70mai A510 Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of 70mai A510. EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
70mai A510 Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of 70mai A510. Authentication is not required to exploit this vulnerability. The specific flaw exists within the default configuration of user accounts. The configuration contains default password. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of the root. Was ZDI-CAN-24996.
Metrics
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| 70mai | A510 Firmware | 1.0.40ww.2024.04.19 |
References
- https://www.zerodayinitiative.com/advisories/ZDI-25-180/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-2766?
How severe is CVE-2025-2766?
How do I fix CVE-2025-2766?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-27654Vasion Print (formerly PrinterLogic) before Virtual Applianc…6.1
- CVE-2025-27655Vasion Print (formerly PrinterLogic) before Virtual Applianc…9.8
- CVE-2025-27656Vasion Print (formerly PrinterLogic) before Virtual Applianc…9.8
- CVE-2025-27657Vasion Print (formerly PrinterLogic) before Virtual Applianc…9.8
- CVE-2025-27658Vasion Print (formerly PrinterLogic) before Virtual Applianc…9.8
- CVE-2025-27659Vasion Print (formerly PrinterLogic) before Virtual Applianc…9.8
- CVE-2025-27660Vasion Print (formerly PrinterLogic) before Virtual Applianc…5.4
- CVE-2025-27661Vasion Print (formerly PrinterLogic) before Virtual Applianc…9.1
- CVE-2025-27662Vasion Print (formerly PrinterLogic) before Virtual Applianc…9.8
- CVE-2025-27663Vasion Print (formerly PrinterLogic) before Virtual Applianc…9.8
- CVE-2025-27664Vasion Print (formerly PrinterLogic) before Virtual Applianc…8.8
- CVE-2025-27665Vasion Print (formerly PrinterLogic) before Virtual Applianc…9.8
Are you affected by CVE-2025-2766?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST