CVE-2026-85628highCWE-319

CVE-2026-85628: falha de alta gravidade em Fermax Electronica S.A.U. DuoxMe

Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability

Publicada em

Seguir esta CVE+ Monitorar DUOX PLUS monitor+ Monitorar DuoxMe

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7epss 0.1%
Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N
Produtos afetados
Fermax Electronica S.A.U. · DuoxMeFermax Electronica S.A.U. · DUOX PLUS monitor firmware (VEO Wi-Fi range)
CVEs relacionadas — Fermax Electronica S.A.U. DuoxMe

No mesmo produto, das mais perigosas para as menos.

CVE-2026-86585HIGHImproper Verification of the Firmware Signature vulnerabilityEPSS 0.2%CVE-2026-86474HIGHImproper Certificate Validation in the Firmware Download vulnerabilityEPSS 0.1%CVE-2026-86443MEDIUMCleartext Storage of Sensitive Information VulnerabilityEPSS 0.1%