CVE-2019-25291

critical · 9.3

INIM Electronics Smartliving SmartLAN/G/SI <=6.x contains hard-coded credentials in its Linux distribution image that cannot be changed through normal device operations. Attackers can exploit these persistent credentials to log in and gain unauthorized system access across multiple SmartLiving device models.

9.3

CVSS

0.4%

EPSS (exploit prob.)

36th

EPSS percentile

2026-01-08

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-798

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/172838
https://packetstormsecurity.com/files/155618
https://www.exploit-db.com/exploits/47763
https://www.inim.biz/
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5546.php

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-25291