CyberSecBulletin

70mai vulnerabilities

We track 5 vulnerabilities in 70mai products across 7 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2025.

5vulnerabilities
3critical
2high
0exploited
9.3average CVSS score

Latest 70mai vulnerabilities

  • 9.8 Critical severity

    X200: Use of Default Credentials

    CVE-2025-1194370mai

    A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit ha

  • 9.8 Critical severity

    X200: Improper Authentication

    CVE-2025-1194270maiEPSS 1.09%

    A flaw has been found in 70mai X200 up to 20251010. Affected is an unknown function of the component Pairing. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been published and may be use

  • 8.8 High severity

    M300: Use of Default Credentials

    CVE-2025-652970mai

    A vulnerability was found in 70mai M300 up to 20250611 and classified as critical. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation leads to use of default credentials. The attack needs to be initiated with

  • 8.8 High severity

    A510: Use of Default Password

    CVE-2025-276670mai

    70mai A510 Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of 70mai A510. Authentication is not required to exploit this vulnerability. The spe

  • 9.1 Critical severity

    A500s Firmware: Missing Authentication for Critical Functionality

    CVE-2023-4327170mai

    Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder through ftp and other protocols.