Threat Investigation
Request a demo

CVE-2025-41702

Critical

Description

The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.

SeverityCritical
CVSS9.8
Exploit probability—
ProductEG400Mk2-D11001-000101
PublishedAug 26, 2025
First seenAug 26, 2025
Weakness typeCWE-321CWE-321

How to fix

Update
  • Welotec EG400Mk2-D11001-000101v1.7.7, v1.8.2 or later
  • Welotec EG400Mk2-D11101-000101v1.7.7, v1.8.2 or later
  • Welotec EG503Wv1.7.7, v1.8.2 or later
  • Welotec EG503Lv1.7.7, v1.8.2 or later
  • Welotec EG503W_4GBv1.7.7, v1.8.2 or later
  • Welotec EG503L_4GBv1.7.7, v1.8.2 or later
  • Welotec EG503L-Gv1.7.7, v1.8.2 or later
  • Welotec EG500Mk2-A11101-000101v1.7.7, v1.8.2 or later
  • Welotec EG500Mk2-A11001-000101v1.7.7, v1.8.2 or later
  • Welotec EG500Mk2-B11101-000101<v1.7.7, v1.8.2 or later
  • Welotec EG500Mk2-B11001-000101<v1.7.7, v1.8.2 or later
  • Welotec EG500Mk2-C11101-000101<v1.7.7, v1.8.2 or later

Affected products

ProductAffected versionsFixed in
Welotec EG400Mk2-D11001-000101v < v1.7.7, v1.8.0 ≤ v < v1.8.2v1.7.7, v1.8.2
Welotec EG400Mk2-D11101-000101v < v1.7.7, v1.8.0 ≤ v < v1.8.2v1.7.7, v1.8.2
Welotec EG503Wv < v1.7.7, v1.8.0 ≤ v < v1.8.2v1.7.7, v1.8.2
Welotec EG503Lv < v1.7.7, v1.8.0 ≤ v < v1.8.2v1.7.7, v1.8.2
Welotec EG503W_4GBv < v1.7.7, v1.8.0 ≤ v < v1.8.2v1.7.7, v1.8.2
Welotec EG503L_4GBv < v1.7.7, v1.8.0 ≤ v < v1.8.2v1.7.7, v1.8.2
Welotec EG503L-Gv < v1.7.7, v1.8.0 ≤ v < v1.8.2v1.7.7, v1.8.2
Welotec EG500Mk2-A11101-000101v < v1.7.7, v1.8.0 ≤ v < v1.8.2v1.7.7, v1.8.2
Welotec EG500Mk2-A11001-000101v < v1.7.7, v1.8.0 ≤ v < v1.8.2v1.7.7, v1.8.2
Welotec EG500Mk2-B11101-000101v < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG500Mk2-B11001-000101v < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG500Mk2-C11101-000101v < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG500Mk2-C11001-000101v < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG500Mk2-A12011-000101v < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG500Mk2-A11001-000201v < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG500Mk2-A21101-000101v < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG602Wv < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG602Lv < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG603W Mk2v < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG603L Mk2v < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG802Wv < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG804Wv < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG802W_i7_512GB_DinRailv < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG802W_i7_512GB_w/o DinRailv < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2
Welotec EG804W Prov < <v1.7.7, v1.8.0 ≤ v < v1.8.2<v1.7.7, v1.8.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-41702 · EG400Mk2-D11001-000101 · Dark Radar