PT-2026-1683 · Inim Electronics · Smartlan/G/Si

CVE-2019-25291 · Publicado 2026-01-07 · Atualizado 2026-01-08

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions INIM Electronics Smartliving SmartLAN/G/SI versions 6.x and earlier

Description The Smartliving SmartLAN/G/SI software contains hard-coded credentials within its Linux distribution image. These credentials cannot be altered through standard device management procedures. An attacker can leverage these persistent credentials to gain unauthorized system access to multiple SmartLiving device models.

Recommendations Versions prior to 6.x should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2019-25291

Produtos afetados

Smartlan/G/Si

Referências · 7

• 🔥 https://exploit-db.com/exploits/47763 · Exploit
• 🔥 https://packetstormsecurity.com/files/155618 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25291 · Nota de Segurança
• https://inim.biz · Nota
• https://t.me/CVEtracker/41647 · Publicação no Telegram
• https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5546.php · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/172838 · Nota