CVE-2025-1143

published 2025-02-11

CVE-2025-1143: Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these…

Priority P3 45 high 8.4 CVSS 3.1

AV L AC L PR N UI N S U C H I H A H

Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of the system.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
billion_electric	m100	>= 1.04.1.* < 1.04.1.676	1.04.1.676
billion_electric	m100	>= 1.04.1.159.* < 1.04.1.592.10	1.04.1.592.10
billion_electric	m100	>= 1.04.1.613.* < 1.04.1.613.14	1.04.1.613.14
billion_electric	m120n	>= 1.04.1.* < 1.04.1.676	1.04.1.676
billion_electric	m120n	>= 1.04.1.592.* < 1.04.1.592.10	1.04.1.592.10
billion_electric	m120n	>= 1.04.1.613.* < 1.04.1.613.14	1.04.1.613.14
billion_electric	m150	>= 1.04.1.* < 1.04.1.676	1.04.1.676
billion_electric	m150	>= 1.04.1.592.* < 1.04.1.592.10	1.04.1.592.10
billion_electric	m150	>= 1.04.1.613.* < 1.04.1.613.14	1.04.1.613.14
billion_electric	m500	>= 1.04.1.* < 1.04.1.676	1.04.1.676
billion_electric	m500	>= 1.04.1.592.* < 1.04.1.592.10	1.04.1.592.10
billion_electric	m500	>= 1.04.1.613.* < 1.04.1.613.14	1.04.1.613.14

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-798