by Kastro
Paper/Archive/CVE-2025-8286

CVE-2025-8286

Güralp Systems Güralp FMUS Series — Güralp Systems FMUS Series and MIN Series Devices

EPSS 1%CVSS 9.3
critical.is priorityof 100
42
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 71.4.714 × 2014.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The affected products expose an unauthenticated Telnet-based command line interface that could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device.

Affected

ProductAffectedFixed inSource
Güralp FMUS SeriesAll versions–CNA
MIN Series DevicesAll versions–CNA

Scores by source

icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-25-212-01