CPC200-CCPA vulnerabilities

3 known vulnerabilities in CPC200-CCPA from CarlinKit. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  CPC200-CCPA: Use of Hard-coded Credentials

  CVE-2025-2765Apr 23, 2025CarlinKit

  CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not r

• 8.0 High severity

  CPC200-CCPA: Improper Verification of Cryptographic Signature

  CVE-2025-2764Apr 23, 2025CarlinKit

  CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of CarlinKit CPC200-CCPA devices. Although

• 7.8 High severity

  CPC200-CCPA: Missing Immutable Root of Trust in Hardware

  CVE-2025-2762Apr 23, 2025CarlinKit

  CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of CarlinKit CPC200-CCPA devices. An attacker must first obtain the ability to exec