CyberRota Analysis
AI-GeneratedA vulnerability in the Credential Manager component allows unauthenticated remote attackers to gain unauthorized administrative access by exploiting a predictable factory-default password on devices in their factory-default or post-ZTP state. This could lead to full administrative control during the initial setup process, posing a significant risk to device security. Organizations utilizing affected devices should prioritize remediation to prevent potential exploitation during deployment.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process.
Related CVEs
Other vulnerabilities affecting the same vendor(s)