Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-71317. PoCs published by Parsa Rezaie Khiabanloo.
AI-analyzed exploit summary This writeup details an authentication bypass vulnerability in Netman 204 UPS panels, allowing unauthenticated access to sensitive endpoints and remote commands. It includes specific URLs and methods to exploit the flaw, such as using default credentials and path traversal techniques.
Description
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax parameter validation can be shortened to /cgi-bin/login.cgi?username=eurek%20eurek) to obtain administrator privileges, allowing them to alter device configuration, enable the telnet/SSH services, and reset local user credentials.
Exploits (1)
This writeup details an authentication bypass vulnerability in Netman 204 UPS panels, allowing unauthenticated access to sensitive endpoints and remote commands. It includes specific URLs and methods to exploit the flaw, such as using default credentials and path traversal techniques.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H