CVE-2025-46273CWE-798

Planet Technology Network Products Use of Hard-coded Credentials

Critical · published April 24, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
45.2
In the wild
Unconfirmed
What it is

🚨 Hard-coded credentials are an open invitation to attackers! With UNI-NMS-Lite, anyone can waltz right in and claim admin privileges on all managed devices. 🔥 Think of this like a hotel with a master key left lying around. Anyone who finds it can stroll in and access every room without needing to check in at the front desk — incredibly risky! If an attacker exploits this vulnerability, they could take full control of all managed devices, accessing sensitive data and configurations, and potentially wreaking absolute havoc on your network. This is no small potatoes; it’s a recipe for complete chaos!

Put simply

Think of this like a hotel with a master key left lying around. Anyone who finds it can stroll in and access every room without needing to check in at the front desk — incredibly risky! The vulnerability arises from hard-coded credentials in UNI-NMS-Lite, which means attackers can log in without proper authentication, granting them full administrative rights to the system.

What to do

If an attacker exploits this vulnerability, they could take full control of all managed devices, accessing sensitive data and configurations, and potentially wreaking absolute havoc on your network. This is no small potatoes; it’s a recipe for complete chaos! Immediately change the hard-coded credentials to secure, unique passwords and ensure that access controls are enforced. Then, consider updating to the latest version of UNI-NMS-Lite to mitigate this vulnerability effectively. You've got this! By taking these steps, you can protect your network and ensure that no unwelcome guests come knocking. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00549 · 45.2th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-04-24T22:57Z
EPSS history
Timeline
  • 24 APR 22:57Z
    Planet Technology Network Products Use of Hard-coded Credentials
    cvelistv5