CVE-2026-5570
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 has a vulnerability in the index_config function of the /LoginCB file, causing improper authentication. The attack can be performed remotely, and the exploit is publicly available.
Risk Assessment
Improper authentication allows unauthorized access to the device, potentially leading to full control over the network hardware.
Recommendation
Immediately isolate the device from the network and contact the vendor for patches; if unavailable, consider replacing the device.
Other vulnerabilities in Technostrobe HI-LED-WR120-G2
See all- CVE-2026-5574Medium
Missing authorization in the deletefile function of the FsBrowseClean component in Technostrobe HI-LED-WR120-G2 (version 5.5.0.1R6.03.30). Manipulation of the dir/path argument allows remote file deletion.
- CVE-2026-5573High
A weakness has been identified in Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 in an unknown function of the file /fs. Manipulating the argument cwd can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made public and could be used for attacks.
- CVE-2026-5572Medium
Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 is vulnerable to CSRF in an unknown function. The attack can be performed remotely, and the exploit has been publicly released.
- CVE-2026-5571Medium
Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 has a vulnerability in an unknown function of the /fs file in the Configuration Data Handler component. Manipulating the File argument leads to information disclosure. The attack is remote, and the exploit is public. The vendor did not respond.
- CVE-2026-5569High
The Technostrobe HI-LED-WR120-G2 device version 5.5.0.1R6.03.30 has a vulnerability in an unknown function of the /Technostrobe/ endpoint. Manipulation leads to improper access controls. The attack can be performed remotely, and the exploit has been made public. The vendor did not respond.
Original NVD description (English source)
A vulnerability was determined in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. The affected element is the function index_config of the file /LoginCB. This manipulation causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.