← Back to CVE search

CVE-2026-49195

mtk_dut

Description

Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.

CVSS 8.8EPSS 0.215%Risk 0.9
View source
Published
2026-05-29 09:16:17
Affected versions
unknown
Type
Firmware
Last modified
2026-07-21 12:10:00
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H