CVE-2025-34034

CVE-2025-34034 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Paolo Serracino_ Pietro Minniti_ Damiano Proietti.

AI-analyzed exploit summary This exploit demonstrates authenticated command execution in Blue Angel Software Suite by leveraging hardcoded credentials and a command injection vulnerability in the ping functionality. It logs in using default credentials and executes arbitrary commands via the ping_addr parameter.

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC.