CVE-2025-10880 — Insufficiently Protected Credentials in Dingtian DT-R002

CVE-2025-10880

Insufficiently Protected Credentials in Dingtian DT-R002 PUBLISHED

Description (CNA)

All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request.

Affected (CNA)

Vendor / product	Versions
Dingtian / DT-R002	affected All versions

CWE

CWE-522

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-268-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.