CVE-2025-53558

Published Jul 31, 2025

Last updated 2 days ago

ZTE

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-53558 affects ZTE ZXHN-F660T and ZXHN-F660A devices provided by ZTE Japan K.K. These devices use a common credential for all installations. An attacker with knowledge of this credential can log in to the affected devices. To mitigate this vulnerability, it is recommended to update the firmware to the latest version or change the default credentials to unique, strong passwords.

Description: ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge of the credential, an attacker may log in to the affected devices.
Source: vultures@jpcert.or.jp
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 8.7
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: HIGH

CVSS 3.0

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

vultures@jpcert.or.jp: CWE-1391

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 29

References

Sources include official advisories and independent security research.