What’s Vulnerable › Vulnerabilities

CVE-2025-34034: 5VTechnologies Blue Angel Software Suite Hardcoded Credentials

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-06-24 · updated 2026-06-17
• Weakness: CWE-798

Description

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC.

Affected products

• 5VTechnologies Blue Angel Software Suite: all versions

References

• https://vulncheck.com/advisories/5vtechnologies-blue-angel-hardcoded-credentials
• https://www.exploit-db.com/exploits/46792
• https://www.exploit-db.com/exploits/46792

Get alerted when CVE-2025-34034 or the next vulnerability affects your stack