CVE-2026-82487
MediumCVSS 6.3Summary
A vulnerability was identified in Beetel 450TC3 01.00.00_01, affecting an unknown part. Manipulation can lead to weak password recovery. The attack can be executed remotely, and the exploit has been publicly disclosed. The vendor did not respond.
Risk Assessment
The risk includes remote exploitation of weak password recovery, potentially leading to unauthorized access to the device.
Recommendation
It is recommended to restrict access to the device from external networks and contact the vendor for fixes.
Other vulnerabilities in Beetel 450TC3
See all- CVE-2026-82488Low
A vulnerability was identified in Beetel 450TC3 01.00.00_01, affecting the User Management component. Manipulating the Username argument leads to cross site scripting. The attack can be carried out remotely, and the exploit is publicly available. The vendor did not respond.
- CVE-2020-25498Medium
A Cross Site Scripting (XSS) vulnerability in the Beetel router 777VR1 can be exploited via the NTP server name in System Time and the "Keyword" field in URL Filter.
Original NVD description (English source)
A vulnerability was determined in Beetel 450TC3 01.00.00_01. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.