Is there a public PoC exploit available for CVE-2025-11943?

Yes, a public proof-of-concept exploit is available for CVE-2025-11943. Prioritise patching immediately. EPSS: 0.1%.

X200 Firmware CVE-2025-11943

Q: What is the CVSS score of CVE-2025-11943?

CVE-2025-11943 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

MEDIUM

Use of Default Credentials (CWE-1392)

2025-10-19 cna@vuldb.com

Information Disclosure X200 Firmware 70Mai

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 18:46 vuln.today

CVE Published

Oct 19, 2025 - 20:15 cve.org

MEDIUM 5.5

DescriptionCVE.org

A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Use of default credentials in the 70mai X200 dashcam HTTP web server allows remote unauthenticated attackers to access the device with root privileges. All firmware versions up to 20251010 are affected, and a publicly available exploit exists. The vendor was contacted but did not respond, and no official patch is available.