A vulnerability was found in 70mai X200 up to 20251010. It has been declared as critical. Affected is an unknown function of the component Pairing. Executing manipulation can lead to missing authentication.

This vulnerability is registered as CVE-2025-11942. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The application of restrictive firewalling is recommended.

The vendor was contacted early about this disclosure but did not respond in any way.