PT-2025-26661 · Unknown · Blue Angel Software Suite

Damiano Proietti + 2 · Published 2025-06-24 · Updated 2025-07-09 · CVE-2025-34034

Positive Technologies · (AI Summary)

CVSS v4.0

9.3

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions:

Blue Angel Software Suite (affected versions not specified)

Description:

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-34034

Affected Products

Blue Angel Software Suite

References · 11

• 🔥 https://exploit-db.com/exploits/46792 · Exploit
• https://cve.org/CVERecord?id=CVE-2025-34034 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34034 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-34034 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-34034 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1937340157578940455 · Twitter Post
• https://t.me/cvenotify/128262 · Telegram Post
• https://vulncheck.com/advisories/5vtechnologies-blue-angel-hardcoded-credentials · Note
• https://twitter.com/CVEnew/status/1937344576303276399 · Twitter Post
• https://t.me/latest_high_impact_cve/2791 · Telegram Post
• https://vulncheck.com/advisories/blue-angel-software-suite-command-injection-default-credentials · Note