A vulnerability described as problematic has been identified in Hundred Plus EIP Plus. This affects an unknown function. Such manipulation leads to weak password recovery.
This vulnerability is listed as CVE-2025-12866. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
