CVE-2025-71317

The flaw

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/log

What to do

Review advisory and patch per vendor guidance.

References