CVE-2025-4041CWE-798

Use of Hard-coded Credentials Optigo Networks ONS NC600

Critical · published May 6, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

In Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, an attacker could connect with the device's ssh server and utilize the system's components to perform OS command executions.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00736 · 53.9th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-05-06T16:35Z
EPSS history
Timeline
  • 06 MAY 16:35Z
    Use of Hard-coded Credentials Optigo Networks ONS NC600
    cvelistv5