{"id":"CVE-2025-12592","aliases":["EUVD-2025-198160","GHSA-3c2h-8xmc-2258"],"status":"published","title":"Use of default login credentials in Legacy Vivotek Devices","description":"Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.","severity":{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/AU:Y/U:Red","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00361,"percentile":0.30136,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1392"],"published":"2025-11-19T12:30:32Z","modified":"2026-06-17T08:32:37Z","products":[{"vendor":"vivotek","product":"affected device model numbers are fd7131-vvtk,fd7131-vvtk,fd7131-vvtk,fd7141-vvtk,ip7131-vvtk,ip7133-vvtk,ip7133-vvtk,ip7133-vvtk,ip7134-vvtk,ip7135-vvtk,ip7135-vvtk,ip7135-vvtk,ip7135-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7138-vvtk,ip7142-vvtk,ip7142-vvtk,ip7151-vvtk,ip7152-vvtk,ip7153-vvtk,ip7153-vvtk,ip7154-vvtk,ip7330-vvtk,ip7330-vvtk,ip7330-vvtk,ip8131-vvtk,ip8131-vvtk,ip8131-vvtk,ip8131w-vvtk,pt7135-vvtk,pt7137-tcon,pt7137-vvtk,pt7137-vvtk,pt7137-vvtk,pt7137-vvtk,pz7131-vvtk,pz7131-vvtk,pz71x1-vvtk,pz71x1-vvtk,pz71x2-vvtk,sd73x3-vvtk,sd73x3-vvtk,sd73x3-vvtk,tc5330-vvtk,tc5332-tcvv,tc5333-tcvv,tc5633-tcvv,tc5633-vvtk,vs7100-vvtk,vs7100-vvtk,vs7100-vvtk"}],"references":[{"url":"https://www.akamai.com/blog/security-research/rce-zero-day-in-legacy-vivotek-firmware"},{"url":"http://www.vapidlabs.com/advisory.php?v=219"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12592"},{"url":"https://github.com/advisories/GHSA-3c2h-8xmc-2258"}],"sources":{"cve":[{"id":"CVE-2025-12592","title":"Use of default login credentials in Legacy Vivotek Devices","description":"Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.","status":"published","published":"2025-11-19T12:30:32.854Z","modified":"2025-11-19T16:07:56.677Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/AU:Y/U:Red","level":"critical","assessor":"cna"}],"cwes":["CWE-1392"],"updated_at":"2026-11-02T14:32:41.743125Z"}],"euvd":[{"id":"EUVD-2025-198160","description":"Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.","status":"published","published":"2025-11-19T12:30:32Z","modified":"2025-11-19T16:07:56Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/AU:Y/U:Red","level":"critical"}],"updated_at":"2026-11-02T19:49:15.429944Z"}],"ghsa":[{"id":"GHSA-3c2h-8xmc-2258","title":"Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.","description":"Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.","status":"published","published":"2025-11-19T15:31:39Z","modified":"2025-11-19T15:31:44Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:Red","level":"critical"}],"cwes":["CWE-1392"],"updated_at":"2026-11-02T15:04:52.427555Z"}],"nvd":[{"id":"CVE-2025-12592","description":"Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.","status":"published","published":"2025-11-19T13:15:51.327Z","modified":"2026-06-17T08:32:37.787Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:Red","level":"critical","assessor":"secondary"}],"cwes":["CWE-1392"],"updated_at":"2026-11-02T14:11:46.009629Z"}]}}