CVE-2025-57295

{
  "id": "CVE-2025-57295",
  "sourceIdentifier": "[email protected]",
  "published": "2025-09-18T21:15:49.350",
  "lastModified": "2026-11-07T17:10:00.240",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The root user account has no password set, and the H3C user account uses the default password \"admin,\" both stored in the /etc/shadow file. Attackers with network access can exploit these credentials to gain unauthorized root-level access to the device via the administrative interface or other network services, potentially leading to privilege escalation, information disclosure, or arbitrary code execution."
    },
    {
      "lang": "es",
      "value": "Los dispositivos H3C que ejecutan la versión de firmware NX15V100R015 son vulnerables a acceso no autorizado debido a credenciales predeterminadas inseguras. La cuenta de usuario root no tiene contraseña configurada, y la cuenta de usuario H3C utiliza la contraseña predeterminada ’admin’, ambas almacenadas en el archivo /etc/sha4dow. Atacantes con acceso a la red pueden explotar estas credenciales para obtener acceso no autorizado a nivel de root al dispositivo a través de la interfaz administrativa u otros servicios de red, lo que podría llevar a escalada de privilegios, revelación de información o ejecución de código arbitrario."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "baseScore": 8.0,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.1,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-09-19T14:13:49.610615Z",
          "id": "CVE-2025-57295",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-521"
        },
        {
          "lang": "en",
          "value": "CWE-1188"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:h3c:magic_nx15_firmware:nx15v100r015:*:*:*:*:*:*:*",
              "matchCriteriaId": "043B5B6D-E2B5-48EF-ACF9-2835C4BD27AC"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:h3c:magic_nx15:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "93D19A70-0177-4778-8DE1-31BBC29D6A20"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/ZZ2266/.github.io/blob/main/H3C/readme.md",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://www.h3c.com/cn/d_202504/2407151_30005_0.htm",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    }
  ]
}