https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:42:24.907723+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-2772 CVE-2025-2772 — BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability 2026-10-07T17:42:24.924302+00:00

Affected: BEC Technologies Multiple Routers

BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within /cgi-bin/tools_usermanage.asp. The issue results from transmitting a list of users and their credentials to be handled on the client side. An attacker can leverage this vulnerability to disclose transported credentials, leading to further compromise. Was ZDI-CAN-25895.