[CVE-2026-35075] An unauthenticated remote attacker can recover a default, hard coded password from a firmware image …

Descripción técnica

An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.

Puntuación CVSS

Score: 9.8/10 — Severidad: CRITICAL — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Universal gateway firmware, Double-a profibus, Double-a x-link, Double-x can, Double-x dali — Mbs-solutions

Debilidades (CWE)

CWE-1393

Fuente oficial

Publicado en NIST NVD.