CVE-2025-60772

Improper authentication in the web-based management interface of NETLINK HG322G V1.0.00-231017, allows a remote unauthenticated attacker to escalate privileges…

Critical · published October 21, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
47.9
In the wild
Unconfirmed
What it is

🚨 A crafty HTTP request is all it takes for a remote attacker to lock out your admin on the NETLINK HG322G! 🔥 Think of it like a hotel that forgot to change its master key after a staff turnover. With just the right approach, an outsider could waltz in and lock the original owner out of their own room! This vulnerability allows an attacker to escalate privileges and completely lock the legitimate administrator out of the management interface, leading to an absolute nightmare for network control. Imagine being locked out of your own house while intruders change the locks!

Put simply

Think of it like a hotel that forgot to change its master key after a staff turnover. With just the right approach, an outsider could waltz in and lock the original owner out of their own room! The flaw lies in improper authentication within the web-based management interface, which enables remote unauthenticated attackers to exploit crafted HTTP requests to gain unauthorized access.

What to do

This vulnerability allows an attacker to escalate privileges and completely lock the legitimate administrator out of the management interface, leading to an absolute nightmare for network control. Imagine being locked out of your own house while intruders change the locks! Immediately update your NETLINK HG322G to version 1.0.00-231018 or later, and review access controls to ensure only authorized users can send requests. Don't forget to regularly monitor logs for suspicious activity! You’ve got this! Act fast, and you’ll have those doors secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00597 · 47.9th percentile
Published
2025-10-21T00:00Z
EPSS history
Timeline
  • 21 OCT 00:00Z
    Improper authentication in the web-based management interface of NETLINK HG322G V1.0.00-231017, allows a remote unauthenticated attacker to escalate privileges…
    cvelistv5