CVE-2025-5484

CVE-2025-5484 describes a critical authentication bypass vulnerability in SinoTrack device management interfaces, affecting all devices due to a hardcoded, well-known default password and a non-enforced password change policy. This vulnerability carries a high CVSS score of 8.3, indicating a severe risk where an unauthenticated attacker can gain full control over devices with low attack complexity, potentially leading to high confidentiality, integrity, and limited availability impacts. While there is no evidence of active exploitation or publicly available exploit code, the ease of obtaining device identifiers from public sources makes this a significant threat.