PT-2025-37264 · Daikin · Daikin Security Gateway

Gjoko Krstic · Published 2025-09-11 · Updated 2025-09-14 · CVE-2025-10127

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Daikin Security Gateway (affected versions not specified)

Description: The Daikin Security Gateway is susceptible to an authorization bypass. An attacker can bypass authentication and gain access to the system without valid credentials through a user-controlled key vulnerability.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-640

Related Identifiers

BDU:2025-14620

CVE-2025-10127

Affected Products

Daikin Security Gateway

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-10127 · Security Note
• https://bdu.fstec.ru/vul/2025-14620 · Security Note
• https://twitter.com/CveFindCom/status/1966232586797088887 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-254-10 · Note
• https://daikin.eu/en_us/customers/support.html · Note
• https://t.me/pentestingnews/68003 · Telegram Post
• https://twitter.com/autumn_good_35/status/1966494035780010230 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1ngtrtw/top_10_trending_cves_14092025 · Reddit Post
• https://twitter.com/fridaysecurity/status/1966344410033172527 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1966354910779175153 · Twitter Post
• https://twitter.com/CVEnew/status/1966233715069300897 · Twitter Post
• https://twitter.com/CrowdCyber_Com/status/1966677493584101809 · Twitter Post