Authentication Bypass Vulnerability in 70mai A510 Products

CVE-2025-2766

What is CVE-2025-2766?

The 70mai A510 exhibits a significant flaw due to its default password configuration, allowing attackers with network access to bypass authentication protocols. This misconfiguration permits unauthorized users to access and control the device, granting them the potential to execute arbitrary code as the root user. With no requirement for authentication, the vulnerability poses a serious risk to systems that utilize the affected product, making it crucial for users to change default passwords and implement enhanced security measures.

References