CVE-2025-5379 — NuCom NC-WR744G Console Application hard-coded credentials

CVE-2025-5379

NuCom NC-WR744G Console Application hard-coded credentials PUBLISHED

Description (CNA)

A vulnerability classified as critical was found in NuCom NC-WR744G 8.5.5 Build 20200530.307. This vulnerability affects unknown code of the component Console Application. The manipulation of the argument CMCCAdmin/useradmin/CUAdmin leads to hard-coded credentials. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
NuCom / NC-WR744G	affected 8.5.5 Build 20200530.307

CWE

CWE-798, CWE-259

References

https://vuldb.com/?id.310672
https://vuldb.com/?ctiid.310672
https://vuldb.com/?submit.582868

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.