PT-2025-29559 · Nexxt Solutions · Ncm-X1800 Mesh Router

Published 2025-07-15 · Updated 2025-07-20 · CVE-2025-52376

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nexxt Solutions NCM-X1800 Mesh Router firmware versions UV1.2.7 and below

Description An authentication bypass exists in the /web/um open telnet.cgi endpoint. This bypass allows an attacker to remotely enable the Telnet service without authentication, circumventing security measures. The Telnet server is then accessible using hard-coded credentials, granting attackers administrative shell access and the ability to execute arbitrary commands on the device.

Recommendations Versions prior to UV1.2.7: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Using Hardcoded Credentials

Weakness Enumeration

CWE-287

CWE-798

Related Identifiers

CVE-2025-52376

Affected Products

Ncm-X1800 Mesh Router

References · 6

• 🔥 https://github.com/Vagebondcur/nexxt-solutions-NCM-X1800-exploits/blob/main/CVE-2025-52376/writeup.md · Exploit
• 🔥 https://github.com/Vagebondcur/nexxt-solutions-NCM-X1800-exploits · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-52376 · Security Note
• https://t.me/cvetracker/27855 · Telegram Post
• https://twitter.com/CVEnew/status/1945125455906119751 · Twitter Post
• https://twitter.com/cracbot/status/1946887866472386598 · Twitter Post