CVE-2025-52376

An authentication bypass vulnerability in the /web/um_open_telnet.cgi endpoint in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below, allowing an…

Critical · published July 15, 2025

CVSS v3.1
9.8
EPSS
14%
Percentile
96.5
In the wild
Unconfirmed
What it is

🚨 An attacker can flip a switch and enable Telnet on your router without breaking a sweat! 😱 This authentication bypass vulnerability in the Nexxt Solutions NCM-X1800 is a recipe for disaster! Think of it like a hotel that forgot to lock the service elevator. Anyone can waltz in, avoid the front desk security, and access all the upper floors — including the penthouse suite! Once the Telnet service is activated, attackers can log in using hard-coded credentials, gaining complete control over your router. This means they can execute any command they want, potentially compromising your whole network and exposing sensitive data. It’s absolutely devastating! 🔥

Put simply

Think of it like a hotel that forgot to lock the service elevator. Anyone can waltz in, avoid the front desk security, and access all the upper floors — including the penthouse suite! This vulnerability allows attackers to remotely enable the Telnet service on the Nexxt Solutions NCM-X1800 router, bypassing security protocols entirely. With access to hard-coded credentials, they can gain administrative shell access and execute arbitrary commands on the device.

What to do

Once the Telnet service is activated, attackers can log in using hard-coded credentials, gaining complete control over your router. This means they can execute any command they want, potentially compromising your whole network and exposing sensitive data. It’s absolutely devastating! 🔥 To safeguard your network, immediately update the router firmware to version UV1.2.8 or higher. Additionally, consider disabling the Telnet service entirely if it’s not needed. Regularly audit your router's security settings to prevent future vulnerabilities. You’ve got this! With these steps, you’ll lock down your router and keep your network safe from harm. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.13769 · 96.5th percentile
Published
2025-07-15T00:00Z
EPSS history
Timeline
  • 15 JUL 00:00Z
    An authentication bypass vulnerability in the /web/um_open_telnet.cgi endpoint in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below, allowing an…
    cvelistv5