CVE-2025-5379

MEDIUM

NuCom NC-WR744G 8.5.5 Build 20200530.307 - Hard-Coded Credentials

Title source: llm

Description

A vulnerability classified as critical was found in NuCom NC-WR744G 8.5.5 Build 20200530.307. This vulnerability affects unknown code of the component Console Application. The manipulation of the argument CMCCAdmin/useradmin/CUAdmin leads to hard-coded credentials. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Scores

CVSS v3 4.3
EPSS 0.0004
EPSS Percentile 10.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-259 CWE-798
Status draft

Timeline

Published May 31, 2025
Tracked Since Feb 18, 2026