CVE-2025-1143

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of the system.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

Vendor	Product	Versions
Billion Electric	M100	>= 1.04.1.159., < 1.04.1.592.10; >= 1.04.1.613., < 1.04.1.613.14; >= 1.04.1.*, < 1.04.1.676
Billion Electric	M150	>= 1.04.1.592., < 1.04.1.592.10; >= 1.04.1.613., < 1.04.1.613.14; >= 1.04.1.*, < 1.04.1.676
Billion Electric	M120N	>= 1.04.1.592., < 1.04.1.592.10; >= 1.04.1.613., < 1.04.1.613.14; >= 1.04.1.*, < 1.04.1.676
Billion Electric	M500	>= 1.04.1.592., < 1.04.1.592.10; >= 1.04.1.613., < 1.04.1.613.14; >= 1.04.1.*, < 1.04.1.676

References

Timeline

Published: Feb 11, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-114309.8A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /cart.p CVE-2025-114319.8A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the f CVE-2025-114329.8A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /reset.php. Such ma CVE-2025-114336.1A security flaw has been discovered in itsourcecode Leave Management System 1.0. This impacts the function redirect of the file /module/empl CVE-2025-114349.8A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.CVE-2025-114356.1A security vulnerability has been detected in JhumanJ OpnForm up to 1.9.3. Affected by this vulnerability is an unknown functionality of the CVE-2025-114368.8A vulnerability was detected in JhumanJ OpnForm up to 1.9.3. Affected by this issue is some unknown functionality of the file /answer. The m CVE-2025-114374.8A flaw has been found in JhumanJ OpnForm up to 1.9.3. This affects an unknown part of the file /api/open/forms/ of the component Form Editor CVE-2025-114386.3A vulnerability has been found in JhumanJ OpnForm up to 1.9.3. This vulnerability affects unknown code of the file /custom-domains of the co CVE-2025-114394.3A vulnerability was found in JhumanJ OpnForm up to 1.9.3. This issue affects some unknown processing of the file /show/integrations. Perform CVE-2025-11449.8School Affairs System from Quanxun has an Exposure of Sensitive Information, allowing unauthenticated attackers to view specific pages and o CVE-2025-114404.3A vulnerability was determined in JhumanJ OpnForm up to 1.9.3. Impacted is an unknown function of the file /edit. Executing manipulation can