Vulnerabilities

TI-2025-02417 CVE-2025-2765 · GHSA-2pwc-7gr8-9w97

Hard-coded credentials in CarlinKit CPC200-CCPA

LOW 38

CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00409 Published 2025-04-23 No fix listed CWE-798

TI-2025-02416 CVE-2025-2764 · GHSA-mxxr-2fvg-xw43

LOW 36

CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00251 Published 2025-04-23 No fix listed CWE-347

TI-2025-02415 CVE-2025-2763 · GHSA-gfww-4w9g-j3mr

LOW 31

CarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00205 Published 2025-04-23 No fix listed CWE-347

TI-2025-02414 CVE-2025-2762 · GHSA-5m6v-fcw2-pgcq

LOW 35

CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00194 Published 2025-04-23 No fix listed CWE-1326