← Database

CVE-2025-10880

HIGH CVSS: 7.5 Published: 2025-09-25 Modified: 2026-06-17

Description

All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request.

Affected Platforms

Dingtian-Tech Dt-R002Dingtian-Tech Dt-R002 Firmware

Weakness Type

CWE-522

References