Skip to content
OpenAdvisories
High ICSA-25-268-01 2 CVEs

Dingtian DT-R002

Published Sep 25, 2025 · Updated Sep 25, 2025

Vendor: Dingtian Product: DT-R002

Summary

Successful exploitation of these vulnerabilities could allow an attacker to retrieve credentials without authentication.

Vulnerabilities 2

  • High 8.7
    CVE-2025-10879

    Insufficiently Protected Credentials in Dingtian DT-R002

    All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the current user's username without authentication.

    Dingtian DT-R002
  • High 8.7
    CVE-2025-10880

    Insufficiently Protected Credentials in Dingtian DT-R002

    All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request.

    Dingtian DT-R002

Revision history

  1. #1

    Initial Publication

References