Veille CVE

‹ Retour à la liste

CVE-2026-19901

8.1 Élevée

Publiée le 15/08/2026 à 20:16 · Modifiée le 20/08/2026 à 14:48 · Analyse NVD reportée · Source : cna@vuldb.com

Description

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is reported as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Traduire en français

Produits concernés

Scores CVSS

VersionScoreSourceVecteur
4.0 8.2 Élevée cna@vuldb.com CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
3.1 8.1 Élevée cna@vuldb.com CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2.0 7.6 Élevée cna@vuldb.com AV:N/AC:H/Au:N/C:C/I:C/A:C

Faiblesses (CWE)

Références

Ailleurs