Home

Description

A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the network, only by local users on the server.

PUBLISHED Reserved 2025-04-05 | Published 2025-06-06 | Updated 2025-06-06 | Assigner B.Braun




CRITICAL: 9.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Problem types

CWE-798 Use of Hard-coded Credentials

Product status

Default status
unaffected

3.0 (custom)
affected

Credits

Fabian Weber (CODE WHITE GmbH) reporter

Dr. Florian Hauser (CODE WHITE GmbH) reporter

References

www.bbraun.com/productsecurity

cve.org (CVE-2025-3321)

nvd.nist.gov (CVE-2025-3321)

Download JSON