CVE-2025-70998

Published: Feb 18, 2026Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

UTT HiPER 810 / nv810v4 router firmware v1.5.0-140603 was discovered to contain insecure default credentials for the telnet service, possibly allowing a remote attacker to gain root access via a crafted script.

Affected (1)

Products: Utt: 810 Firmware

Utt

1 product

810 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Utt 810 Firmware	Version 1.5.0-140603

Running on/with	Platform Versions
Utt 810	Version 4.0

Related CWEs

CWE-1188

Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (1)

https://github.com/cha0yang1/UTT-nv810v4-telnet-backdoor

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.