Description
An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user -user-app-. Charging could be interrupted.
CVSS 8.6EPSS 0.258%Risk 0.88
View source- Published
- 2026-07-30 07:16:57
- Affected versions
- unknown
- Type
- Firmware
- Last modified
- 2026-07-30 15:16:33
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H