Description (CNA)
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| 5VTechnologies / Blue Angel Software Suite | affected 0 |
CWE
CWE-798
References
- https://www.exploit-db.com/exploits/46792
- https://vulncheck.com/advisories/5vtechnologies-blue-angel-hardcoded-credentials
ADP enrichment
No English description supplied.