CVE-2025-34034
published 2025-06-24CVE-2025-34034: A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known…
PriorityP183high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
ITWVulnCheck KEV
Exploited in the wild
EPSS
0.56%
42.6th percentile
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| 5vtechnologies | blue_angel_software_suite | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv4.09.3CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
osv9.3CRITICAL
vulncheck9.3CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-h9v9-64wf-34gh: A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems
ghsa_unreviewed·2025-06-26
CVE-2025-34034 [CRITICAL] CWE-798 GHSA-h9v9-64wf-34gh: A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface.
OSV
CVE-2025-34034: A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems
osv·2025-06-24·CVSS 9.3
CVE-2025-34034 [CRITICAL] CVE-2025-34034: A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC.
VulnCheck
5vtechnologies blue_angel_software_suite Use of Hard-coded Credentials
vulncheck·2025·CVSS 9.3
CVE-2025-34034 [CRITICAL] 5vtechnologies blue_angel_software_suite Use of Hard-coded Credentials
5vtechnologies blue_angel_software_suite Use of Hard-coded Credentials
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC.
Affected: 5VTechnologies Blue Angel Software Suite
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://vulncheck.com/advisories/5vtechnologie
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-06-24
Published
Exploited in the wild