The specific flaw exists within the web-based user interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25894.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| BEC Technologies | Multiple Routers | unknown |
|
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-12184 | BEC Technologies Multiple Routers Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25894. |
| Link | Providers |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-25-184/ |
|
Mon, 18 Aug 2025 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Bectechnologies
Bectechnologies router Firmware |
|
| CPEs | cpe:2.3:o:bectechnologies:router_firmware:-:*:*:*:*:*:*:* | |
| Vendors & Products |
Bectechnologies
Bectechnologies router Firmware |
Wed, 23 Apr 2025 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 23 Apr 2025 17:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | BEC Technologies Multiple Routers Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25894. | |
| Title | BEC Technologies Multiple Routers Authentication Bypass Vulnerability | |
| Weaknesses | CWE-287 | |
| References |
| |
| Metrics |
cvssV3_0
|
MITRE
Status: PUBLISHED
Assigner: zdi
Published:
Updated: 2025-04-23T17:50:26.583Z
Reserved: 2025-03-24T19:44:28.532Z
Link: CVE-2025-2771
Vulnrichment
Updated: 2025-04-23T17:50:22.474Z
NVD
Status : Analyzed
Published: 2025-04-23T17:16:55.160
Modified: 2025-08-18T15:55:21.937
Link: CVE-2025-2771
Redhat
No data.
OpenCVE Enrichment
No data.