Vulnerability details
CVE-2025-2398
ChinaMobile GT3200-4G4PChinaMobile GT3200-8G8PChinaMobile P22g-CIacChinaMobile ZXWT-MIG-P4G4VChinaMobile ZXWT-MIG-P8G8V
China Mobile P22g-CIac CLI su Command default credentials
CVSS 4.0
8.6High
Official description
A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 20250305. It has been rated as critical. This issue affects some unknown processing of the component CLI su Command Handler. The manipulation leads to use of default credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.6High | 4.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 7.2High | 3.1 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| 7.2High | 3.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| 8.3High | 2.0 | CVEProject cvelistV5 (CNA) (VulDB) | AV:N/AC:L/Au:M/C:C/I:C/A:C |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| ChinaMobile | GT3200-4G4P | 20250305 | CVEProject cvelistV5 (CNA) |
| ChinaMobile | GT3200-8G8P | 20250305 | CVEProject cvelistV5 (CNA) |
| ChinaMobile | P22g-CIac | 20250305 | CVEProject cvelistV5 (CNA) |
| ChinaMobile | ZXWT-MIG-P4G4V | 20250305 | CVEProject cvelistV5 (CNA) |
| ChinaMobile | ZXWT-MIG-P8G8V | 20250305 | CVEProject cvelistV5 (CNA) |
References and advisories
3- https://vuldb.com/?id.299897 vdb-entry
- https://vuldb.com/?ctiid.299897 signaturepermissions-required
- https://github.com/Fizz-L/Vulnerability-report/blob/main/Unauthorized%20access%20to%20execute%20the%20telnet%20command.md exploit
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-03-18
- Last updated
- 2025-03-18
- State
- Published
- Assigner (CNA)
- VulDB
Exploit prediction (EPSS)
0.59%
Probability of exploitation in 30 days
48.5%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Proof of concept
- Technical impact
- Total
Weaknesses (CWE)
- CWE-1392Use of Default Credentials