CVE-2026-7251CWE-259

Eppendorf BioFlo 320 Use of hard-coded password

Critical · published May 26, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
54.1
In the wild
Unconfirmed
What it is

Eppendorf BioFlo 320 is vulnerable due to VNC server using a hard-coded password. If a remote attacker knows the network address of any BioFlo 320 model with remote access enabled, they can gain full control of the user interface by using this password. Once connected, the attacker would have full access to all control panel features for the BioFlo 320. VNC traffic is not encrypted.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00740 · 54.1th percentile
Weakness
CWE-259 · Use of Hard-coded Password
Published
2026-05-26T17:06Z
EPSS history
Timeline
  • 26 MAY 17:06Z
    Eppendorf BioFlo 320 Use of hard-coded password
    cvelistv5