Hy511 Firmware
1 CVEs
product
Monthly
NJHYST HY511 POE core (before 2.1) allows unauthenticated download of the configuration file containing usernames and self-decrypted MD5 passwords, due to insufficient cookie verification. PoC available.
Authentication Bypass
Hy511 Firmware
NVD
GitHub
CVSS 3.1
9.8
EPSS
0.1%
CVE-2025-65212
EPSS 0%
CVSS 9.8
CRITICAL
POC
Act Now
NJHYST HY511 POE core (before 2.1) allows unauthenticated download of the configuration file containing usernames and self-decrypted MD5 passwords, due to insufficient cookie verification. PoC available.
Authentication Bypass
Hy511 Firmware
NVD
GitHub