CVE-2026-4582lowCWE-287CWE-306

CVE-2026-4582: falha de baixa gravidade em Shenzhen HCC Technology MPOS M6 PLUS

Shenzhen HCC Technology MPOS M6 PLUS Bluetooth missing authentication

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar MPOS M6 PLUS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 2.3epss 0.3%
A security vulnerability has been detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this vulnerability is an unknown functionality of the component Bluetooth. Such manipulation leads to missing authentication. The attack must be carried out from within the local network. Attacks of this nature are highly complex. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
Shenzhen HCC Technology · MPOS M6 PLUS
CVEs relacionadas — Shenzhen HCC Technology MPOS M6 PLUS

No mesmo produto, das mais perigosas para as menos.

CVE-2026-4583LOWShenzhen HCC Technology MPOS M6 PLUS Bluetooth authentication replayEPSS 0.3%CVE-2026-108901MEDIUMShenzhen HCC Technology MPOS M6 PLUS Display QR Code Rendering ui layerEPSS 0.2%CVE-2026-4584LOWShenzhen HCC Technology MPOS M6 PLUS Cardholder Data cleartext transmissionEPSS 0.2%