CVE-2026-32957
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
SD-330AC devices and AMC Manager provided by silex technology contain a missing authentication for critical function issue on firmware maintenance. Arbitrary files may be uploaded to the device without authentication.
Risk Assessment
An unauthenticated attacker could upload arbitrary files to the device, potentially enabling installation of malicious firmware or code execution.
Recommendation
Restrict access to the firmware maintenance interface and promptly deploy the vendor firmware fix.
Other vulnerabilities in SD-330AC and AMC Manager
See all- CVE-2026-32964Medium
SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.
- CVE-2026-32962Medium
SD-330AC devices and AMC Manager provided by silex technology contain a missing authentication for critical function issue. The device configuration may be altered without authentication.
- CVE-2026-32959Medium
SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with the use of a broken or risky cryptographic algorithm. Information in the traffic may be retrieved via a man-in-the-middle attack.
Original NVD description (English source)
SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue on firmware maintenance. Arbitrary file may be uploaded on the device without authentication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS