CVE-2026-73809: fallo de gravedad alta en Ebyte NA111-M Firmware
Ebyte NA111-M Cleartext Transmission of Sensitive Information
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.7epss 0.2%
A cleartext transmission of sensitive information vulnerability exists
in certain Ebyte gateway products. The web management interface does not
adequately protect sensitive communications using transport-layer
encryption. An attacker with access to network traffic could intercept
authentication or session-related information transmitted between a user
and the affected device. Successful exploitation could result in
disclosure of sensitive information and unauthorized access to device
management functionality.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Ebyte · Ebyte NA111-M FirmwareCVEs relacionadas — Ebyte NA111-M Firmware
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-73125CRITICALEbyte NA111-M Missing Authentication for Critical FunctionEPSS 0.8%CVE-2026-71187CRITICALEbyte NA111-M Use of Client-Side AuthenticationEPSS 0.8%CVE-2026-76179CRITICALEbyte NA111-M Use of GET Request Method With Sensitive Query StringsEPSS 0.7%CVE-2026-73819CRITICALEbyte NA111-M Weak AuthenticationEPSS 0.5%CVE-2026-76940HIGHEbyte NA111-M Improper Restriction of Excessive Authentication AttemptsEPSS 0.5%CVE-2026-77966HIGHEbyte NA111-M Missing AuthorizationEPSS 0.4%