Critical · 9.8 CVE-2025-43982 EUVD-2025-24631GHSA-7fpj-6pv2-x899

Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the SSH service by default. There is a hidden hard-coded root acc…

Published Aug 13, 2025 · Updated Aug 14, 2025 · Assigned by mitre

Description

Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the SSH service by default. There is a hidden hard-coded root account that cannot be disabled in the GUI.

References

https://github.com/actuator/cve/tree/main/Tuoshi
https://github.com/actuator/cve/blob/main/Tuoshi/CVE-2025-43982.txt