CVE-2025-2771

Summary

CVE-2025-2771 is a newly disclosed authentication bypass vulnerability affecting various BEC Technologies routers. Hackers can exploit this issue remotely without requiring any authentication credentials. The root cause lies in the web-based user interface, where insufficient authentication checks allow unauthorized access to system functionalities. This weakness opens the door for attackers to bypass the authentication system, potentially leading to unauthorized network access and data breaches. This vulnerability, previously identified as ZDI-CAN-25894, underscores the importance of timely security updates and strong authentication practices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.