PT-2025-23404 · Nucom · Nucom Nc-Wr744G

Matuii · Published 2025-05-31 · Updated 2025-05-31 · CVE-2025-5379

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NuCom NC-WR744G version 8.5.5 Build 20200530.307

Description A critical vulnerability was found in the Console Application component of the affected software. The issue involves the manipulation of the CMCCAdmin/useradmin/CUAdmin argument, leading to the exposure of hard-coded credentials. This vulnerability can be exploited remotely. The vendor was contacted about this issue but did not respond.

Recommendations For NuCom NC-WR744G version 8.5.5 Build 20200530.307, as a temporary workaround, consider restricting access to the Console Application component until a patch is available. Avoid using the CMCCAdmin/useradmin/CUAdmin argument in the affected application to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-259

CWE-798

Related Identifiers

CVE-2025-5379

Affected Products

Nucom Nc-Wr744G

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-5379 · Security Note
• https://vuldb.com/?id.310672 · Note
• https://vuldb.com/?submit.582868 · Note
• https://vuldb.com/?ctiid.310672 · Note
• https://t.me/cvenotify/124245 · Telegram Post
• https://t.me/cvetracker/25085 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1928820518632702040 · Twitter Post
• https://twitter.com/CVEnew/status/1928811513659199783 · Twitter Post