CVE-2025-34034
5VTechnologies Blue Angel Software Suite Hardcoded Credentials
- State
- Published
- Severity
- 9.3 Critical
- Published
- Jun 24, 2025
- Updated
- Apr 7, 2026
- Reserved
- Apr 15, 2025
Description
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
Weaknesses
- CWE-798 Use of Hard-coded Credentials
Affected Products
| Product | Versions |
|---|---|
Blue Angel Software Suite5VTechnologies |
|
References
- https://www.exploit-db.com/exploits/46792third-party-advisoryexploit
- https://vulncheck.com/advisories/5vtechnologies-blue-angel-hardcoded-credentialsthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.