CVE-2025-8286 - Güralp Systems FMUS Series and MIN Series Devices

Back Back to CVE browser

CRITICAL

Güralp Systems FMUS Series and MIN Series Devices

Published Jul 31, 2025

9.3

CRITICAL

CVSS 4.0

EPSS 1.27%

Description

The affected products expose an unauthenticated Telnet-based command line interface that could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device.

Affected products

Vendor Güralp Systems Product Güralp FMUS Series Seismic Monitoring Devices Default
unaffected
Affected
- All versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Güralp Systems	Güralp FMUS Series Seismic Monitoring Devices	unaffected	Affected All versions

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-23300		Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-25-212-01

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Jul 31, 2025

Updated Aug 15, 2025

Reserved Jul 28, 2025

Link CVE-2025-8286

CISA Vulnrichment

Updated Jul 31, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-8286

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Jul 31, 2025

Updated Aug 15, 2025

Link EUVD-2025-23300

GitHub

No data