Compare commits

...
Author SHA1 Message Date
Prince Chaddha 34da6336a3 Move CVE-2025-8286 to correct directory and improve template
- Move template from http/cves/2025/ to network/cves/2025/ (TCP protocol)
- Update name to follow format guidelines
- Add max-request metadata
- Improve description clarity
- Add guralp vendor tag
- Fix FOFA query formatting
- Remove trailing spaces
2025-08-01 08:15:10 -07:00
@@ -1,11 +1,11 @@
id: CVE-2025-8286
info:
name: Güralp Systems FMUS Series Seismic Monitoring Devices - Missing Authentication for Critical Function
name: Güralp Systems FMUS Series - Missing Authentication for Critical Function
severity: critical
author: darses
description: |
The affected products expose an unauthenticated Telnet-based command line interface that could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device.
Güralp Systems FMUS Series Seismic Monitoring Devices expose an unauthenticated Telnet-based command line interface that allows attackers to modify hardware configurations, manipulate data, or factory reset the device.
impact: |
Successful exploitation of this vulnerability could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device.
remediation: |
@@ -17,15 +17,14 @@ info:
cvss-score: 9.8
metadata:
vendor: guralp_systems
product: guralp_fmus_series_seismic_monitoring_devices
shodan-query:
- '"Welcome to " "list of available commands" port:4244'
fofa-query:
- '"Welcome to " && "list of available commands" && port="4244"'
product: fmus_series_seismic_monitoring_devices
max-request: 2
shodan-query: '"Welcome to " "list of available commands" port:4244'
fofa-query: '"Welcome to " && "list of available commands" && port="4244"'
reference:
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-212-01
- https://www.cve.org/CVERecord?id=CVE-2025-8286
tags: ics,cve,cve2025,tcp,telnet
tags: ics,cve,cve2025,tcp,telnet,guralp
tcp:
- host: