CVE-2025-34034
Last modified
CVE-2025-34034 is a critical-severity vulnerability rated 9.3/10 on the CVSS scale. A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. EPSS estimates a 0.56% chance of exploitation in the next 30 days.
Description
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| 5vtechnologies | Blue Angel Software Suite | All versions |
References
- https://vulncheck.com/advisories/5vtechnologies-blue-angel-hardcoded-credentialsThird Party Advisory
- https://www.exploit-db.com/exploits/46792Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/46792Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2025-34034?
How severe is CVE-2025-34034?
How do I fix CVE-2025-34034?
Are you affected by CVE-2025-34034?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST