37 matches found
CVE-2026-49007
By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface...
CVE-2026-49008 Integrity‑check credential leakage vulnerability in an application function of ZTE F689 product
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device...
EUVD-2026-54410
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device...
CVE-2026-49008
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device...
CVE-2026-49008
The CVE-2026-49008 entry concerns the ZTE F689 product and describes an integrity-check credential leakage in an application function. The vulnerability arises from unencrypted information in device firmware that could allow an attacker to obtain credentials related to the integrity verification ...
EUVD-2026-54408
By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface...
CVE-2026-49007
By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface...
CVE-2026-49007
CVE-2026-49007 affects the ZTE F689 device. The issue arises from unencrypted information in the device firmware, enabling an attacker to obtain the initial login credentials for the web interface. Root cause: firmware exposes credentials in plaintext or unprotected form. Impact: credential discl...
CVE-2026-49007 Information leakage vulnerability in ZTE F689 product
By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface...
CVE-2026-49006 TLS credential leakage vulnerability in ZTE F689 product
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission...
CVE-2026-49005
The root password hash of the device can be obtained through unencrypted information in the firmware...
EUVD-2026-54357
The root password hash of the device can be obtained through unencrypted information in the firmware...
CVE-2020-24396
homee Brain Cube v2 2.28.2 and 2.28.4 devices have sensitive SSH keys within downloadable and unencrypted firmware images. This allows remote attackers to use the support server as a SOCKS proxy...
CVE-2025-64305 Columbia Weather Systems MicroServer Cleartext Storage in a File or on Disk
MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal...
CVE-2025-65825
The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can disassemble the device, connect over UART, and retrieve the firmware dump for analysis. Within the NVS partition they may discover the credentials of the current and...
EUVD-2025-202620
The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can disassemble the device, connect over UART, and retrieve the firmware dump for analysis. Within the NVS partition they may discover the credentials of the current and...
Meatmeet Pro BBQ Thermometer 安全漏洞
Meatmeet Pro BBQ Thermometer is an advanced smart thermometer from Meatmeet. A security vulnerability exists in the Meatmeet Pro BBQ Thermometer version v1.0.34.4, which stems from unencrypted firmware and could lead to the disclosure of sensitive information and unauthorized network access...
PT-2025-50500
Name of the Vulnerable Software and Affected Versions Meatmeet affected versions not specified Description The firmware on the Meatmeet basestation is not encrypted. An attacker with physical access can retrieve the firmware dump via UART, potentially discovering credentials for current and...