by Kastro
Paper/Archive/CVE-2025-34034

CVE-2025-34034

5VTechnologies Blue Angel Software Suite — 5VTechnologies Blue Angel Software Suite Hardcoded Credentials

EPSS 0.7%public exploitCVSS 9.3
critical.is priorityof 100
48
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 51.5.515 × 2010.3Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC.

Affected

ProductAffectedFixed inSource
Blue Angel Software Suiteall versions–CNA

Scores by source

VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitexploit-db.com/exploits/46792writeupvulncheck.com/advisories/5vtechnologies-blue-angel-hardcoded-credentials