CVE-2025-53558

DiscoveredJul 31, 2025UpdatedApr 15, 2026

ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge of the credential, an attacker may log in to the affected devices.

View graph Watch Export

CVSS v3.1

8.8 HIGH

EPSS

1.47%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Oct 22, 2026

▲ 0.12pp

1.35% → 1.47% over 4 tracked changes

CVSS v3.1 Detail

Attack VectorADJACENT

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Connections

1 relationships

CWE-1391

source

Timeline

disclosure → media coverage

Jul 31, 2025

Disclosure — published as a CVE record. · last revised by NVD Apr 15, 2026

Public PoC (1)

github.com/houqe/POC_CVE-2025-53558

Unverified third-party code — review before executing.