Vulnerability · Published Aug 28, 2025 · Assigned by VulDB

CVE-2025-9589Cudy WR1200EA shadow default password

Low 2.5

In plain English

A low-severity security flaw in WR1200EA from Cudy. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 3.1)2.5Low

Exploit odds (30 days)0.1%top 97.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in Cudy WR1200EA 2.3.7-20250113-121810. Affected is an unknown function of the file /etc/shadow. Executing manipulation can lead to use of default password. The attack needs to be launched locally. A high complexity level is associated with this attack. The exploitability is told to be difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Cudy	WR1200EA	2.3.7-20250113-121810

Weakness: CWE-1393 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

References

VDB-321761 | Cudy WR1200EA shadow default password vdb-entry
VDB-321761 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #636138 | Cudy Cudy WR1200EA Router 2.3.7 Password Hash With Insufficient Computational Effort third-party-advisory
https://github.com/ZZ2266/.github.io/tree/main/Cudy related
https://github.com/ZZ2266/.github.io/tree/main/Cudy#steps-to-reproduce exploit