{"id":"CVE-2025-28200","aliases":["EUVD-2025-14827","GHSA-x3g7-56f2-8w33"],"status":"published","title":"Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which...","description":"Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00661,"percentile":0.51957,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-521"],"published":"2025-05-09T00:00:00Z","modified":"2026-07-05T16:19:20Z","products":[{"vendor":"govicture","product":"rx1800_firmware"}],"references":[{"url":"https://pwnit.io/2025/02/13/finding-vulnerabilities-in-wi-fi-router/","tags":["exploit","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-28200"},{"url":"https://pwnit.io/2025/02/13/finding-vulnerabilities-in-wi-fi-router"},{"url":"http://rx1800.com"},{"url":"http://victure.com"},{"url":"https://github.com/advisories/GHSA-x3g7-56f2-8w33"}],"sources":{"cve":[{"id":"CVE-2025-28200","description":"Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address.","status":"published","published":"2025-05-09T00:00:00Z","modified":"2026-07-05T16:05:37.6Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-521"],"updated_at":"2026-11-02T14:32:50.176138Z"}],"euvd":[{"id":"EUVD-2025-14827","description":"Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address.","status":"published","published":"2025-05-09T00:00:00Z","modified":"2026-07-05T16:05:37Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:20:14.2986Z"}],"ghsa":[{"id":"GHSA-x3g7-56f2-8w33","title":"Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which...","description":"Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address.","status":"published","published":"2025-05-09T18:30:37Z","modified":"2025-05-13T00:32:17Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-521"],"updated_at":"2026-11-02T15:02:14.75912Z"}],"nvd":[{"id":"CVE-2025-28200","description":"Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address.","status":"published","published":"2025-05-09T16:15:24.003Z","modified":"2026-07-05T16:19:20.073Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-521"],"updated_at":"2026-11-02T14:11:07.176032Z"}]}}