CVE-2025-28200

Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address

Critical · published May 9, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

🔥 A weak default password that’s just the last 8 digits of the MAC address? That's like leaving a treasure map out for anyone who walks by! Think of it like a hotel room where instead of a unique key card, every guest has a key that opens every room — that’s how easy it is for anyone to access your devices! With this critical flaw, an attacker could easily waltz into your system, gaining full control and potentially wreaking havoc by accessing sensitive information or altering configurations. If they know the MAC address, it’s game over, making this vulnerability absolutely devastating!

Put simply

Think of it like a hotel room where instead of a unique key card, every guest has a key that opens every room — that’s how easy it is for anyone to access your devices! The Victure RX1800 device is using a dangerously weak default password formula that can be easily guessed, allowing unauthorized access to the system. This vulnerability undermines the security integrity of the device, leaving it wide open for exploitation.

What to do

With this critical flaw, an attacker could easily waltz into your system, gaining full control and potentially wreaking havoc by accessing sensitive information or altering configurations. If they know the MAC address, it’s game over, making this vulnerability absolutely devastating! Immediately change the default password to a strong, unique one that doesn't rely on easily obtainable information like the MAC address. Keep an eye on further updates from the manufacturer and ensure your device firmware is up to date to mitigate risks. You've got this! Strengthen your defenses, and soon you'll be the security hero of your own story! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00650 · 50.5th percentile
Published
2025-05-09T00:00Z
EPSS history
Timeline
  • 09 MAY 00:00Z
    Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address
    cvelistv5