CVE-2025-2771
NONE EPSS 49.8%
Published Apr 23, 20251y ago · Modified Jun 17, 20261w ago
Published Apr 23, 2025 1y ago
Last Modified Jun 17, 2026 1w ago
Description
BEC Technologies Multiple Routers Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25894.
Threat Intelligence
EPSS Exploit Probability
49.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-287 Improper Authentication Authentication
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| bectechnologies | router_firmware | * | any |
References 1
- zerodayinitiative.com https://www.zerodayinitiative.com/advisories/ZDI-25-184/
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.