{"affected":[],"cveId":"CVE-2025-57577","cwes":["CWE-798"],"description":"An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the Supplier's position is that their \"product lines enforce or clearly prompt users to change any initial credentials upon first use. At most, this would be a case of misconfiguration if an administrator deliberately ignored the prompts, which is outside the scope of CVE definitions.\"","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8,"severity":"high","source":"NVD: 134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794075000200,"publishedAt":1757693734923,"references":[{"source":"cve@mitre.org","tags":[],"url":"https://github.com/XXRicardo/iot-cve/blob/main/H3C/R365V300R004.md"},{"source":"cve@mitre.org","tags":[],"url":"https://h3c.com/"},{"source":"cve@mitre.org","tags":[],"url":"https://www.h3c.com/cn/"}],"remediation":[],"revision":"5e11259974501b06c93e70babc3715b2fd6357b18c1df1bd9796aa33dc57af0f","sources":[{"modifiedAt":1794075000200,"name":"NVD","retrievedAt":1794075419643,"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-57577"}],"ssvc":{"assessedAt":1757693091117,"automatable":"no","exploitation":"poc","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"total"},"status":"published","title":"CVE-2025-57577","updatedAt":1794075419643}