EUVD-2025-18955
Incorrect Privilege Assignment (CWE-266)
2025-06-23
[email protected]
3.1
CVSS 3.1
CVSS VectorNVD
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Lifecycle Timeline
4
EUVD ID Assigned
Mar 15, 2026 - 22:10 euvd
EUVD-2025-18955
Analysis Generated
Mar 15, 2026 - 22:10 vuln.today
PoC Detected
Nov 14, 2025 - 14:46 vuln.today
Public exploit code
CVE Published
Jun 23, 2025 - 22:15 nvd
LOW 3.1
DescriptionNVD
A vulnerability, which was classified as problematic, was found in 70mai M300 up to 20250611. Affected is an unknown function of the component Web Server. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
A security vulnerability in 70mai M300 (CVSS 3.1). Risk factors: public PoC available.
Technical ContextAI
Vulnerability type not specified by vendor. Affects 70mai M300.
RemediationAI
Monitor vendor channels for patch availability.
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).