PT-2025-17864 · Unknown · Wgs-80Hpt-V2+1

Kev Breen · Published 2025-04-14 · Updated 2025-04-28 · CVE-2025-46275

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WGS-80HPT-V2 (affected versions not specified) WGS-4215-8T2S (affected versions not specified)

Description The issue is related to missing authentication in the affected devices, which could allow an attacker to create an administrator account without knowing any existing credentials. This could potentially lead to unauthorized access and control of the devices.

Recommendations For WGS-80HPT-V2, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For WGS-4215-8T2S, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2025-05177

CVE-2025-46275

Affected Products

Wgs-4215-8T2S

Wgs-80Hpt-V2

References · 12

• https://bdu.fstec.ru/vul/2025-05177 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-46275 · Security Note
• https://twitter.com/syedaquib77/status/1916829012103671834 · Twitter Post
• https://planet.com.tw/en/product/wgs-804hpt-v2 · Note
• https://t.me/cvetracker/22333 · Telegram Post
• https://twitter.com/CveFindCom/status/1915549890257572255 · Twitter Post
• https://t.me/purp_sec/576 · Telegram Post
• https://t.me/cvedetector/23719 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-114-06 · Note
• https://twitter.com/cybercronai/status/1915742703549124624 · Twitter Post
• https://planet.com.tw/en/product/wgs-4215-8t2s · Note
• https://twitter.com/CVEnew/status/1915545035224870952 · Twitter Post