CVE-2025-8286

The affected products expose an unauthenticated Telnet-based command line interface that could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device.

Score

CVSS 4.0 9.3 Critical

Status

Deferred - ics-cert@hq.dhs.gov

Published

2025-07-31

Last modified

2025-08-15

Weaknesses

CWE-306

Affected products

• Gralp Fmus Series (Gralp Systems)
• Min Series Devices (Gralp Systems)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-212-01