Which versions of 70mai M300 are affected by CVE-2025-6526?

CVE-2025-6526 is a low-severity vulnerability in 70mai M300 (CVSS 3.1). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.

Is there a public PoC exploit available for CVE-2025-6526?

Yes, a public proof-of-concept exploit is available for CVE-2025-6526. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-6526?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

70mai M300 CVE-2025-6526

Q: What is the CVSS score of CVE-2025-6526?

CVE-2025-6526 has a CVSS 4.0 base score of 1.3 (Low). CVSS vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2025-18956 LOW

Insufficiently Protected Credentials (CWE-522)

2025-06-23 cna@vuldb.com

Information Disclosure M300 Firmware 70Mai

1.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

1.3 LOW

CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

3.1 LOW

Adjacent network, high complexity, no privileges, low confidentiality impact.

3.1 AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

4.0 AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

3.1 (LOW) 1.3 (LOW)

EUVD ID Assigned

Mar 15, 2026 - 22:10 euvd

EUVD-2025-18956

Analysis Generated

Mar 15, 2026 - 22:10 vuln.today

PoC Detected

Nov 14, 2025 - 15:02 vuln.today

Public exploit code

CVE Published

Jun 23, 2025 - 22:15 nvd

LOW 3.1

CVE Published

Jun 23, 2025 - 22:15 cve.org

LOW 1.3

DescriptionCVE.org

A vulnerability, which was classified as problematic, has been found in 70mai M300 up to 20250611. This issue affects some unknown processing of the component HTTP Server. The manipulation leads to insufficiently protected credentials. The attack can only be done within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Exposed root password via unauthenticated HTTP server in 70mai M300 dashcam firmware up to 20250611 allows local network attackers to obtain credentials. Public exploit code exists, but exploitation is difficult and requires local network access. No active exploitation in CISA KEV.

Technical ContextAI

The vulnerability resides in the HTTP server component of the 70mai M300 dashcam firmware. CWE-522 (Insufficiently Protected Credentials) indicates that the device stores or transmits credentials in a manner that can be accessed or decoded by an attacker. The CPE cpe:2.3:o:70mai:m300_firmware:*:*:*:*:*:*:*:* confirms the affected product is the firmware of the M300 model. The HTTP server likely exposes a root password without proper authentication or encryption, allowing anyone on the local network to retrieve it.

RemediationAI

No vendor-released patch identified at time of analysis. As a compensating control, restrict network access to the dashcam's HTTP server by placing it on a separate VLAN or disabling the HTTP server if possible. Block port 80/tcp on the device from untrusted networks. Note that disabling the HTTP server may affect legitimate functionality. Monitor for vendor updates.