CVE-2026-84409
HighCVSS 7.5Summary
The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update information inserts that value directly into the page as HTML, allowing attacker-controlled metadata to be interpreted as script content. Additionally, the same authenticated origin provides an interface capable of executing system-level commands with root privileges.
Risk Assessment
An attacker able to influence update metadata could exploit these conditions to execute arbitrary code within the administrative context of the device. This leads to full device compromise.
Recommendation
Update the firmware to enforce encrypted HTTPS connections for update metadata and proper output encoding in the web interface. Also restrict access to the interface that executes system commands.
Other vulnerabilities in Firmware update mechanism
Original NVD description (English source)
The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update information inserts that value directly into the page as HTML. This behavior allows attacker‑controlled metadata to be interpreted as script content. In addition, the same authenticated origin provides an interface capable of executing system‑level commands with root privileges. An attacker able to influence update metadata could exploit these conditions to execute arbitrary code within the administrative context of the device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS