CVE-2025-46274 CRITICAL

CVE-2025-46274: Planet Technology Network Products Use of Hard-coded Credentials

Vendor Planet Technology

Product UNI-NMS-Lite

Weakness CWE-798 · Hardcoded credentials

Published April 24, 2025

Last update April 25, 2025

CVSS base score

9.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to read, manipulate and create entries in the managed database.

Key dates

April 24, 2025 CVE published

April 25, 2025 Record updated

External resources

Related vulnerabilities