CVE-2026-1407

Katalog CVE

CVSS 4.2 · Medium EPSS 0,30%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada beetel 777vr1 firmware. Skor CVSS 3.1 4.2 (Medium) menurut NVD.

Deskripsi (NVD)

A security flaw has been discovered in Beetel 777VR1 up to 01.00.09/01.00.09_55. This affects an unknown part of the component UART Interface. Performing a manipulation results in information disclosure. The attack may be carried out on the physical device. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

25 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.2 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-284: Improper Access Control

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 20,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/raghav20232023/253c041842f622d9c2cb6ee4111c2227 exploit · advisory pihak ketiga
• https://vuldb.com/?id.342796 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.736322 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.342796 permissions required · vdb entry