High severity7.5NVD Advisory· Published Sep 25, 2025· Updated Jun 17, 2026

CVE-2025-10880

Description

All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dingtian Tech/Dt R002 Firmware
cpe:2.3:o:dingtian-tech:dt-r002_firmware:-:*:*:*:*:*:*:*
Dingtian/Dt R002llm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: All versions

Patches

Vulnerability mechanics

References

www.cisa.gov/news-events/ics-advisories/icsa-25-268-01nvdMitigationThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000