How to fix EUVD-2025-18959?

Within 24 hours: Identify all 70mai M300 devices connected to your network and isolate them from critical systems; change default Telnet credentials immediately. Within 7 days: Disable Telnet service on all affected devices or restrict access to authorized administrative personnel only; document inventory of all M300 devices and their current configuration status. Within 30 days: Evaluate replacement options for unsupported devices; implement network segmentation to restrict M300 device communication; conduct network scan to detect any unauthorized access attempts.

Is M300 Firmware affected by EUVD-2025-18959?

A critical vulnerability in 70mai M300 devices allows unauthorized access through default credentials via the Telnet service, affecting networked devices within your organization's local network.

EUVD-2025-18959

| CVE-2025-6529 HIGH

2025-06-23 [email protected]

Information Disclosure M300 Firmware

8.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 22:10 euvd

EUVD-2025-18959

Analysis Generated

Mar 15, 2026 - 22:10 vuln.today

PoC Detected

Nov 14, 2025 - 14:12 vuln.today

Public exploit code

CVE Published

Jun 23, 2025 - 23:15 nvd

HIGH 8.8

DescriptionNVD

A vulnerability was found in 70mai M300 up to 20250611 and classified as critical. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation leads to use of default credentials. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

A security vulnerability in 70mai M300 (CVSS 8.8). Risk factors: public PoC available.

Technical ContextAI

Vulnerability type not specified by vendor. CVSS 8.8 indicates high severity. Affects 70mai M300.

RemediationAI

Monitor vendor channels for patch availability.

EUVD-2025-18959 vulnerability details – vuln.today

Back

EUVD-2025-18959

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code