Planet Technology Uni-Nms-Lite vulnerabilities

CVE-2025-46271 [CRITICAL] CWE-78 CVE-2025-46271: UNI-NMS-Lite is vulnerable to a command injection attack that could allow an unauthenticated attack UNI-NMS-Lite is vulnerable to a command injection attack that could allow an unauthenticated attacker to read or manipulate device data.

CVE-2025-46273 [CRITICAL] CWE-798 CVE-2025-46273: UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to gain admin UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to gain administrative privileges to all UNI-NMS managed devices.

CVE-2025-46274 [CRITICAL] CWE-798 CVE-2025-46274: UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to read, mani UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to read, manipulate and create entries in the managed database.