CVE-2019-25291 - INIM Electronics Smartliving SmartLAN/G/SI <=6.x Hard-coded Credentials Vulnerability

Back Back to CVE browser

CRITICAL

INIM Electronics Smartliving SmartLAN/G/SI <=6.x Hard-coded Credentials Vulnerability

Published Jan 7, 2026

9.3

CRITICAL

CVSS 4.0

EPSS 0.43%

Description

INIM Electronics Smartliving SmartLAN/G/SI <=6.x contains hard-coded credentials in its Linux distribution image that cannot be changed through normal device operations. Attackers can exploit these persistent credentials to log in and gain unauthorized system access across multiple SmartLiving device models.

Affected products

Vendor INIM Electronics s.r.l. Product Smartliving SmartLAN/G/SI Default
n/a
- Version
  10100L
  Status
  affected
  Constraints
  -
- Version
  10100L/G3
  Status
  affected
  Constraints
  -
- Version
  1050
  Status
  affected
  Constraints
  -
- Version
  1050/G3
  Status
  affected
  Constraints
  -
- Version
  505
  Status
  affected
  Constraints
  -
- Version
  515
  Status
  affected
  Constraints
  -
- Version
  <=6.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

INIM Electronics s.r.l.

Smartliving SmartLAN/G/SI

n/a

Version	Status	Constraints
10100L	affected	-
10100L/G3	affected	-
1050	affected	-
1050/G3	affected	-
505	affected	-
515	affected	-
<=6.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (5)

https://exchange.xforce.ibmcloud.com/vulnerabilities/172838
vdb-entry
https://packetstormsecurity.com/files/155618
exploit
https://www.exploit-db.com/exploits/47763
exploit
https://www.inim.biz/
product
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5546.php
third-party-advisory

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/172838		vdb-entry
https://packetstormsecurity.com/files/155618		exploit
https://www.exploit-db.com/exploits/47763		exploit
https://www.inim.biz/		product
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5546.php		third-party-advisory