CVE Catalog

CVE-2026-3356

CriticalCVSS 9.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

31th percentile - higher than 31% of all known CVEs

Summary

The MS27102A Remote Spectrum Monitor is vulnerable to authentication bypass, allowing unauthorized users to access and manipulate its management interface. The device provides no mechanism to enable or configure authentication, making the issue inherent to its design.

Risk Assessment

Anyone with network access to the device can fully manage the monitor, potentially leading to unauthorized configuration changes and interception of spectral data.

Recommendation

Place the device in an isolated VLAN and restrict access to trusted hosts only. Consider implementing additional network-level authentication (e.g., VPN).

Original NVD description (English source)

The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a deployment error.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS