PT-2025-26661 · Unknown · Blue Angel Software Suite

Damiano Proietti + 2 · Publicado 2025-06-24 · Atualizado 2025-11-17 · CVE-2025-34034

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: Blue Angel Software Suite (affected versions not specified)

Description: A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2025-34034

Produtos afetados

Blue Angel Software Suite

Referências · 13

• 🔥 https://exploit-db.com/exploits/46792 · Exploit
• https://vulncheck.com/advisories/5vtechnologies-blue-angel-hardcoded-credentials · Nota
• https://twitter.com/0dayPublishing/status/1990546716685201419 · Publicação no Twitter
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-34034 · Aviso do Fabricante
• https://vulncheck.com/advisories/blue-angel-software-suite-command-injection-default-credentials · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-34034 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2025-34034 · Nota de Segurança
• https://t.me/cvenotify/128262 · Publicação no Telegram
• https://ubuntu.com/security/CVE-2025-34034 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1937340157578940455 · Publicação no Twitter
• https://t.me/latest_high_impact_cve/2791 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1937344576303276399 · Publicação no Twitter
• https://t.me/cveNotify/143114 · Publicação no Telegram