Default Credential Vulnerability in China Mobile Devices

CVE-2025-2398

What is CVE-2025-2398?

A vulnerability exists in specific China Mobile devices involving the CLI su Command Handler, which could allow unauthorized access due to the use of default credentials. This issue affects several models, including P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P, and GT3200-8G8P, making it possible for attackers to exploit the devices remotely. The risk is heightened as the exploit has been publicly disclosed, yet the vendor has not responded to notifications regarding this critical security concern.

References