CVE-2025-10880

23th percentile - higher than 23% of all known CVEs

All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request.

An attacker can obtain sensitive credentials, potentially leading to unauthorized access to the device and data.

Change default passwords and restrict access to the device, and apply vendor updates.