CVE-2025-8286 CRITICAL

CVE-2025-8286: Güralp Systems FMUS Series and MIN Series Devices

Vendor Güralp Systems
Product Güralp FMUS Series
Weakness CWE-306 · Missing auth
Published July 31, 2025
Last update August 15, 2025
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The affected products expose an unauthenticated Telnet-based command line interface that could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device.

Key dates

02Disclosure timeline

July 31, 2025 CVE published
August 15, 2025 Record updated