← Back to results
Vulnerability record · public intelligence
CVE-2019-25291
HIGH

INIM Electronics Smartliving SmartLAN/G/SI <=6.x Hard-coded Credentials Vulnerability

Published Jan 7, 2026 · Updated Oct 23, 2026

Severity · CVSSHIGH · 7.5
Known exploitationNot listed
EPSS / likelihood0.43%
QFinch risk score10 / 100

Original summary

Normalized public record · Updated Oct 23, 2026

INIM Electronics Smartliving SmartLAN/G/SI <=6.x Hard-coded Credentials Vulnerability

Publisher and source text is retained separately from QFinch interpretation.

QFinch assessment

INIM Electronics Smartliving SmartLAN/G/SI <=6.x contains hard-coded credentials in its Linux distribution image that cannot be changed through normal device operations. Attackers can exploit these persistent credentials to log in and gain unauthorized system access across multiple SmartLiving device models.

Evidence: public source records

Affected products

Affected scope reported by the available public evidence
Affected package, product or rangeFix status
Consult the referenced vendor advisory for affected versions.Consult source advisory

Matching a version is only one part of assessing exposure. QFinch has not assessed your environment on this public page.

Remediation

Apply the vendor-supported fixed release or mitigation, then verify the affected component is no longer reachable.

  1. Confirm the affected product and reachable code path exist in your environment.
  2. Apply the vendor-supported patch or mitigation from the primary advisory.
  3. Rescan the exact deployed revision and retain verification evidence.
Review primary references

Evidence coverage

CVENVDEPSS
SSVC priority
MEDIUM
Confidence
10%
Aliases
None reported

Scores appear only when corresponding evidence exists. Missing data is never interpreted as zero risk.

Sources and record history

  1. Zero Science Lab Vulnerability Advisory ↗
  2. Exploit Database Entry 47763 ↗
  3. Packet Storm Security Exploit File ↗
  4. IBM X-Force Vulnerability Exchange Entry ↗
  5. INIM Vendor Homepage ↗

Record history

Published Jan 7, 2026 · Last refreshed Oct 23, 2026