Approved changes feed: RSS · Atom

cpe:2.3:h:carlinkit:cpc200-ccpa:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorCarlinkit (2ab39016-3a35-55c4-909b-15fe8266c687)
ProductCpc200 Ccpa (1ad743f4-d5c3-5326-8ca7-3be1a4bc89df)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2765 not_vulnerable 2026-06-08 07:16:58.204157 CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability
HIGH (7.6)
CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the wireless hotspot. The issue results from the use of hard-coded credentials. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-24349.
Published: 2025-04-23T16:48:56.902Z
Updated: 2025-04-23T18:05:38.533Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.