CVE-2025-5379CWE-259CWE-798

NuCom NC-WR744G Console Application hard-coded credentials

Medium · published May 31, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
20.1
In the wild
Unconfirmed
What it is

A vulnerability classified as critical was found in NuCom NC-WR744G 8.5.5 Build 20200530.307. This vulnerability affects unknown code of the component Console Application. The manipulation of the argument CMCCAdmin/useradmin/CUAdmin leads to hard-coded credentials. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00287 · 20.1th percentile
Weaknesses
CWE-259 · Use of Hard-coded Password; CWE-798 · Use of Hard-coded Credentials
Published
2025-05-31T13:31Z
EPSS history
Timeline
  • 31 MAY 13:31Z
    NuCom NC-WR744G Console Application hard-coded credentials
    cvelistv5