Which versions of 70mai M300 are affected by CVE-2025-6530?

Organizations using 70mai M300 should be aware of moderate risk from CVE-2025-6530 rated CVSS 4.8. Exploitation could compromise the security of affected deployments.

Is there a public PoC exploit available for CVE-2025-6530?

Yes, a public proof-of-concept exploit is available for CVE-2025-6530. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-6530?

Within 30 days: Identify affected systems running 70mai M300 and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

70mai M300 CVE-2025-6530

Q: What is the CVSS score of CVE-2025-6530?

CVE-2025-6530 has a CVSS 4.0 base score of 5.0 (Medium). CVSS vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2025-18958 MEDIUM

Improper Resource Shutdown or Release (CWE-404)

2025-06-23 cna@vuldb.com

Denial Of Service M300 Firmware 70Mai

5.0

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.0 MEDIUM

CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.8 MEDIUM

AV:A local network, AC:H high complexity, PR:L low privileges, A:H availability impact.

3.1 AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

4.8 (MEDIUM) 5.0 (MEDIUM)

EUVD ID Assigned

Mar 15, 2026 - 22:10 euvd

EUVD-2025-18958

Analysis Generated

Mar 15, 2026 - 22:10 vuln.today

PoC Detected

Nov 14, 2025 - 15:08 vuln.today

Public exploit code

CVE Published

Jun 23, 2025 - 23:15 nvd

MEDIUM 4.8

CVE Published

Jun 23, 2025 - 23:15 cve.org

MEDIUM 5.0

DescriptionCVE.org

A vulnerability was found in 70mai M300 up to 20250611. It has been classified as problematic. This affects an unknown part of the file demo.sh of the component Telnet Service. The manipulation leads to denial of service. Access to the local network is required for this attack. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Denial of service in 70mai M300 dashcam firmware up to 20250611 allows an attacker on the local network to crash the device via the Telnet service's demo.sh script. A public exploit exists, but exploitation requires local network access and high attack complexity. No active exploitation in CISA KEV.

Technical ContextAI

The vulnerability affects the Telnet service on 70mai M300 dashcam firmware, specifically the demo.sh script. The root cause is a denial of service condition (CWE-404) triggered by manipulating the script. The CPE indicates the firmware is the affected product. Telnet is a legacy protocol providing unencrypted remote access, often used in embedded devices for debugging.

RemediationAI

No vendor patch available as vendor did not respond. Compensating controls: disable Telnet service if not needed, restrict network access to the dashcam (e.g., VLAN segmentation, firewall rules blocking Telnet port 23), or upgrade to a newer firmware version if released. Disabling Telnet may affect remote management functionality.