CVE-2026-101054
MediumCVSS 5.3Summary
A vulnerability was identified in Thinkware U3000 up to 1.02.04 in the get_file function of /tmp/wpa_supplicant.conf in the TCP Service component. The manipulation leads to improper access controls, and remote exploitation is possible. The exploit is publicly available and might be used.
Risk Assessment
An attacker can remotely access the wpa_supplicant.conf configuration file, potentially disclosing Wi-Fi network credentials. The vendor was contacted but did not respond.
Recommendation
Restrict network access to the TCP service of the Thinkware U3000 device and consider updating when the vendor provides a fix. Change Wi-Fi passwords if the configuration file may have been exposed.
Other vulnerabilities in Thinkware U3000
See all- CVE-2026-101055Medium
A security flaw has been discovered in Thinkware U3000 up to 1.02.04 in the GET_STATUS function of the TCP Service component. Manipulating the wifi_info argument results in information disclosure, and the attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
- CVE-2026-101053High
A vulnerability was determined in Thinkware U3000 up to 1.02.04 affecting the PUT_FILE function in /tmp/wpa_supplicant.conf of the TCP Service component. Manipulation of the path argument can lead to improper access controls.
Original NVD description (English source)
A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function get_file of the file /tmp/wpa_supplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS