[CVE-2026-31928] The DMP-5000 devices are shipped with a default administrative web account with weak authentication …

Descripción técnica

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.

Puntuación CVSS

Score: 8.1/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Productos afectados

Dmp-5000 firmware, Dmp-5000, Dmp-8000 firmware, Dmp-8000, Vfc-dmp-5000 firmware — Daktronics

Debilidades (CWE)

CWE-798

Fuente oficial

Publicado en NIST NVD.