CVE-2025-26793: FREEDOM Administration - Default Login
Hirsch · Enterphone MESH
Affected: Hirsch Enterphone MESH · Exploitation: check available, not yet exploited
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 84% of scored CVEs
DescriptionCVE.org
The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with default credentials (username freedom, password viscount). The administrator is not prompted to change these credentials on initial configuration, and changing the credentials requires many steps. Attackers can use the credentials over the Internet via mesh.webadmin.MESHAdminServlet to gain access to dozens of Canadian and U.S. apartment buildings and obtain building residents' PII. NOTE: the Supplier's perspective is that the "vulnerable systems are not following manufacturers' recommendations to change the default password."
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Hirsch · Enterphone MESHup to and including 2024
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
- CISA KEV
- Not listed
- Public check
- FREEDOM Administration - Default Login · nuclei template in projectdiscovery/nuclei-templates
- Published
- February 2025
CoverageNo articles yet
No CyberSIXT article names CVE-2025-26793 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.