CVEvulnerability

CVE-2025-57434

8.8 HIGH Published 2025-09-22 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-09-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-287, CWE-798

Description

Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation. The system grants access when the username is creabox and the password begins with the string creacast, regardless of what follows.

Affected configurations

• creacast creabox manager 4.4.4

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-798 Use of Hard-coded Credentials weakness

References