CVE-2025-71317: NetMan 204 Hard-coded Backdoor Credentials
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax parameter validation can be shortened to /cgi-bin/login.cgi?username=eurek%20eurek) to obtain administrator privileges, allowing them to alter device configuration, enable the telnet/SSH services, and reset local user credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71317?
CVE-2025-71317 has a critical severity rating of 9.3.
How do I fix CVE-2025-71317?
To mitigate CVE-2025-71317, disable the hard-coded backdoor account and implement strong authentication measures.
What are the risks associated with CVE-2025-71317?
CVE-2025-71317 allows remote, unauthenticated attackers to gain administrative access, leading to potential data breaches.
What is the impact of CVE-2025-71317 on NetMan 204?
CVE-2025-71317 compromises the security of NetMan 204 by providing an easy entry point for attackers.
Is there a way to detect exploitation of CVE-2025-71317?
Monitoring for unusual login attempts or changes in system settings can help detect exploitation attempts related to CVE-2025-71317.