CVE-2026-5571
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 has a vulnerability in an unknown function of the /fs file in the Configuration Data Handler component. Manipulating the File argument leads to information disclosure. The attack is remote, and the exploit is public. The vendor did not respond.
Risk Assessment
A remote attacker can access sensitive configuration data of the device, potentially leading to further attacks.
Recommendation
Restrict device access to trusted networks and monitor for firmware updates from the vendor.
Other vulnerabilities in Technostrobe HI-LED-WR120-G2
See all- CVE-2026-5574Medium
Missing authorization in the deletefile function of the FsBrowseClean component in Technostrobe HI-LED-WR120-G2 (version 5.5.0.1R6.03.30). Manipulation of the dir/path argument allows remote file deletion.
- CVE-2026-5573High
A weakness has been identified in Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 in an unknown function of the file /fs. Manipulating the argument cwd can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made public and could be used for attacks.
- CVE-2026-5572Medium
Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 is vulnerable to CSRF in an unknown function. The attack can be performed remotely, and the exploit has been publicly released.
- CVE-2026-5570High
Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 has a vulnerability in the index_config function of the /LoginCB file, causing improper authentication. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-5569High
The Technostrobe HI-LED-WR120-G2 device version 5.5.0.1R6.03.30 has a vulnerability in an unknown function of the /Technostrobe/ endpoint. Manipulation leads to improper access controls. The attack can be performed remotely, and the exploit has been made public. The vendor did not respond.
Original NVD description (English source)
A vulnerability was identified in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. The impacted element is an unknown function of the file /fs of the component Configuration Data Handler. Such manipulation of the argument File leads to information disclosure. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS