CVE-2026-49008
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device.
Risk Assessment
The risk includes the possibility of compromising the integrity of application functions and gaining unauthorized access to sensitive data or device functions.
Recommendation
It is recommended to encrypt sensitive information in the firmware and implement integrity protection mechanisms to prevent unauthorized access to credentials.
Other vulnerabilities in Device firmware
See all- CVE-2026-49007High
Vulnerability allowing access to unencrypted information in the device firmware, enabling an attacker to obtain the initial login credentials for the device's web interface.
- CVE-2026-49006Medium
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission.
- CVE-2026-49005Low
The root password hash of the device can be obtained through unencrypted information in the firmware.
- CVE-2026-50210High
The device encrypts data using AES-CBC with static zero-filled Initialization Vectors (IVs), making it susceptible to replay attacks and known-plaintext decryption.
Original NVD description (English source)
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device.