CVE-2026-25715
Gravedad CVSS v3.1:
CRÍTICA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
20/02/2026
Última modificación:
20/02/2026
Descripción
*** Pendiente de traducción *** The web management interface of the device allows the administrator <br />
username and password to be set to blank values. Once applied, the <br />
device permits authentication with empty credentials over the web <br />
management interface and Telnet service. This effectively disables <br />
authentication across all critical management channels, allowing any <br />
network-adjacent attacker to gain full administrative control without <br />
credentials.
Impacto
Puntuación base 3.x
9.80
Gravedad 3.x
CRÍTICA