CVE-2026-49006
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission.
Risk Assessment
Exposure of TLS credentials may allow an attacker to intercept or impersonate communication, compromising data confidentiality and integrity.
Recommendation
Secure the device firmware by encrypting sensitive data and restricting access. Change default credentials and regularly update firmware.
Other vulnerabilities in Device firmware
See all- CVE-2026-49008Medium
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device.
- CVE-2026-49007High
Vulnerability allowing access to unencrypted information in the device firmware, enabling an attacker to obtain the initial login credentials for the device's web interface.
- CVE-2026-49005Low
The root password hash of the device can be obtained through unencrypted information in the firmware.
- CVE-2026-50210High
The device encrypts data using AES-CBC with static zero-filled Initialization Vectors (IVs), making it susceptible to replay attacks and known-plaintext decryption.
Original NVD description (English source)
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission.