Yüksek CVSS 8.6
CVE-2026-22312: CVE-2026-22312: sabit kodlanmış kimlik bilgisi
Açıklama (NVD)
The device has a webserver that exposes a REST API authenticated with a constant token. The unauthenticated API can be used by an attacker to get access to system settings, modify the configuration and execute some commands (e.g. system reboot).
Özet bilgiler
- CVSS v3.1
- 8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L - EPSS
- %0,23 (yüzdelik 14)
- CWE
- CWE-798
- Yama
- Yok / bilinmiyor