CVE-2025-5379

A vulnerability classified as critical was found in NuCom NC-WR744G 8.5.5 Build 20200530.307. This vulnerability affects unknown code of the component Console Application. The manipulation of the argument CMCCAdmin/useradmin/CUAdmin leads to hard-coded credentials. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-259
• CWE-798

• https://vuldb.com/?ctiid.310672
• https://vuldb.com/?id.310672
• https://vuldb.com/?submit.582868

Published

May 31, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53783Heap-based buffer overflow in Microsoft Teams allows an unau…7.5
• CVE-2025-53784Use after free in Microsoft Office Word allows an unauthoriz…8.4
• CVE-2025-53786On April 18th 2025, Microsoft announced Exchange Server Secu…8
• CVE-2025-53787Microsoft 365 Copilot BizChat Information Disclosure Vulnera…7.5
• CVE-2025-53788Time-of-check time-of-use (toctou) race condition in Windows…7
• CVE-2025-53789Missing authentication for critical function in Windows Stat…7.8
• CVE-2025-53791Improper access control in Microsoft Edge (Chromium-based) a…4.7
• CVE-2025-53792Azure Portal Elevation of Privilege Vulnerability9.1
• CVE-2025-53793Improper authentication in Azure Stack allows an unauthorize…7.5
• CVE-2025-53795Improper authorization in Microsoft PC Manager allows an una…9.8
• CVE-2025-53796Buffer over-read in Windows Routing and Remote Access Servic…6.5
• CVE-2025-53797Buffer over-read in Windows Routing and Remote Access Servic…6.5