Insufficiently Protected Credentials in Dingtian DT-R002 from Dingtian

CVE-2025-10879

What is CVE-2025-10879?

The Dingtian DT-R002 device reveals a vulnerability that allows unauthorized attackers to obtain the current user's username without any authentication. This flaw arises from insufficiently protected credentials, potentially exposing sensitive user information and raising significant security concerns. Organizations utilizing this product should prioritize addressing this vulnerability to safeguard their data integrity.

References