Approved changes feed: RSS · Atom

cpe:2.3:o:70mai:x200_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor70Mai (be13cd54-0082-5962-95fe-9f285cc52fa2)
ProductX200 Firmware (6089f8ac-c70b-5a50-bed9-88fb4d59a9a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12915 vulnerable 2026-06-08 07:04:31.182430 70mai X200 Init Script file inclusion
MEDIUM (6.4)
A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is assessed as difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-11-08T23:02:06.006Z
Updated: 2025-11-13T21:44:36.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11943 vulnerable 2026-06-08 07:04:29.445475 70mai X200 HTTP Web Server default credentials
HIGH (7.3)
A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-10-19T19:32:05.817Z
Updated: 2025-10-20T19:06:32.308Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11942 vulnerable 2026-06-08 07:04:29.443854 70mai X200 Pairing missing authentication
HIGH (7.3)
A flaw has been found in 70mai X200 up to 20251010. Affected is an unknown function of the component Pairing. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-10-19T16:02:07.412Z
Updated: 2025-10-20T19:05:53.153Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.