CVE-2025-57578

HighCVSS 8.0/10Last modified Nov 7, 2026

Description

An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Sep 12, 2025
Last modified
Nov 7, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-575798.0An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default passwoCVE-2025-57587.3A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown paCVE-2025-57599.8A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. This vulnerability affectCVE-2025-57604.9The Simple History plugin for WordPress is vulnerable to sensitive data exposure via Detective Mode due to improper sanitization within the CVE-2025-576019.8AiKaan Cloud Controller uses a single hardcoded SSH private key and the username `proxyuser` for remote terminal access to all managed IoT/eCVE-2025-576029.8Insufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined with the use of a shared, hardcoded SSH privCVE-2025-576058.8Lack of server-side authorisation on department admin assignment APIs in AiKaan IoT Platform allows authenticated users to elevate their priCVE-2025-57618.8A vulnerability, which was classified as critical, has been found in PHPGurukul BP Monitoring Management System 1.0. This issue affects someCVE-2025-576115.3An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the dump() method allows an attCVE-2025-576127.5An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the name() method allows an attCVE-2025-576137.5An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A null pointer dereference vulnerability in the input() constructor functCVE-2025-576147.5An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Integer overflow and invalid input vulnerability in the cached method all
CVE-2025-57578: High severity, CVSS 8.0 | Vulnix