Cyber Resilience

CVE-2025-57295

HighPublic PoC

Published: 18 September 2025

Published
18 September 2025
Modified
03 October 2025
KEV Added
Patch
CVSS Score v3.1 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0013 32.1th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-57295 is a high-severity Weak Password Requirements (CWE-521) vulnerability in H3C Magic Nx15 Firmware. Its CVSS base score is 8.0 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Default Accounts (T1078.001); ranked at the 32.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The root user account has no password set, and the H3C user account uses the default password "admin," both stored in the /etc/shadow file.…

more

Attackers with network access can exploit these credentials to gain unauthorized root-level access to the device via the administrative interface or other network services, potentially leading to privilege escalation, information disclosure, or arbitrary code execution.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1078.001 Default Accounts Stealth
Adversaries may obtain and abuse credentials of a default account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
Why these techniques?

Insecure default credentials (root with no password, H3C/admin) enable adversaries to use default accounts for unauthorized root-level access via network services.

Affected Assets

h3c
magic nx15 firmware
nx15v100r015

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-521 CWE-1188

Organization-wide password and authentication policies are applied uniformly, preventing weak local password requirements.

addresses: CWE-521 CWE-1188

Vulnerability scans assess password policies and weak credential requirements against benchmarks.

addresses: CWE-521 CWE-1188

User documentation on maintaining security includes password requirements, directly mitigating weak password policies.

addresses: CWE-1188

Requires documented secure initialization practices and avoidance of insecure defaults in configuration baselines.

addresses: CWE-1188

Reviewing and updating baseline when components are installed or upgraded prevents initialization with insecure defaults.

addresses: CWE-521

Configuration settings can define and enforce strong password requirements to avoid weak policies.

addresses: CWE-1188

Requiring explicit configuration to minimal functionality overrides insecure defaults that would otherwise enable excess capabilities.

addresses: CWE-521

IA policy establishes password requirements, directly addressing weak password requirements.

References