CVE-2026-111460

HighCVSS 7.7

Published: 27/10/2026(UTC)Updated: 27/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

23th percentile - higher than 23% of all known CVEs

Summary

A hard-coded cryptographic key vulnerability exists in OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared key material and impersonate devices that have not regenerated their keys.

Risk Assessment

Confidentiality and integrity of management communications may be compromised through device impersonation.

Recommendation

Update device firmware and enforce regeneration of cryptographic keys per vendor guidance.

Other vulnerabilities in OnCell G3150A-LTE Series

CVE-2026-111461High
An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When SMS management is enabled and configured, a remote attacker with required privileges could exploit insufficient input validation to execute arbitrary commands.

Original NVD description (English source)

A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS