CVE-2025-2766 - CVE House
Back to Database
Status published High CVE-2025-2766

70mai A510 Use of Default Password Authentication Bypass Vulnerability

Vulnerability Description

70mai A510 Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of 70mai A510. Authentication is not required to exploit this vulnerability. The specific flaw exists within the default configuration of user accounts. The configuration contains default password. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of the root. Was ZDI-CAN-24996.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-2766

Credits & Attribution

No credits recorded in the NVD database.

References

More from 70mai

View All →
CVE-2025-6530
70mai M300 Telnet Service demo.sh denial of service
Medium 5.9
CVE-2025-6529
70mai M300 Telnet Service default credentials
High 8.7
CVE-2025-6528
70mai M300 RTSP Live Video Stream Endpoint 12 improper authentication
Medium 5.3
CVE-2025-6527
70mai M300 Web Server access control
Low 2.3
CVE-2025-6526
70mai M300 HTTP Server insufficiently protected credentials
Low 2.3

Affected Vendor

Affected Software

A510
Vulnerable Versions:
v1.0.40ww.2024.04.19

Timeline

Official Publish: June 6th, 2025
Last Modified: June 9th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-1393

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.