CVE-2026-9031
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before processing by internal flash-write logic. Successful exploitation may cause the httpd process or device to crash, resulting in loss of access to the web interface and a denial-of-service condition.
Risk Assessment
The risk includes disruption of web service and potential device crash, affecting the availability of device management.
Recommendation
Upgrade the device firmware to a patched version. Restrict access to the web interface to trusted networks only.
Original NVD description (English source)
An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Successful exploitation may cause httpd process or device to crash, resulting in loss of access to the web interface and a denial-of-service condition.