Vulnerability · Published Jul 31, 2025 · Assigned by icscert
CVE-2025-8286Güralp Systems FMUS Series and MIN Series Devices
Critical 9.3
In plain English
A critical-severity missing authentication in Güralp FMUS Series from Güralp Systems. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS 4.0)9.3Critical
Exploit odds (30 days)1.4%top 28.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Nuclei
Official description
The affected products expose an unauthenticated Telnet-based command line interface that could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Güralp Systems | Güralp FMUS Series | All versions |
| Güralp Systems | MIN Series Devices | All versions |
Weakness: CWE-306 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N