CVE-2025-57430: Creacast Creabox Manager · Information Exposure
Source CVE Database V5
Not known to be exploited · CVSS 7.5 High.
Data as of 26 Oct 2026, 14:05 UTC
- EPSS
- 0.4% chance of exploitation in 30 days – higher than 34% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 22 Sep 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
European organizations should immediately audit their Creacast Creabox Manager deployments to determine if version 4.4.4 is in use and whether the /get endpoint is accessible externally. Specific mitigation steps include: 1) Restrict network access to the /get endpoint by implementing firewall rules or network segmentation to ensure it is not reachable from untrusted networks or the internet. 2) Implement strong access controls and authentication mechanisms on management endpoints to prevent unauthorized access. 3) If possible, disable or remove the /get endpoint or any functionality that exposes sensitive configuration files until a vendor patch is available. 4) Monitor network traffic and logs for any suspicious access attempts to the /get endpoint or unusual administrative activity. 5) Rotate administrative credentials immediately if exposure is suspected or confirmed. 6) Engage with Creacast support or vendor channels to obtain patches or updates addressing this vulnerability as soon as they become available. 7) Conduct security awareness training for IT staff to recognize and respond to potential exploitation attempts. These targeted actions go beyond generic advice by focusing on network-level controls, credential hygiene, and proactive monitoring tailored to the specific vulnerability.
Description
Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When accessed, this endpoint returns internal configuration including the creacodec.lua file, which contains plaintext admin credentials.