Fermax Electronica S.A.U. DUOX PLUS monitor firmware (VEO Wi-Fi range) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Fermax Electronica S.A.U. DUOX PLUS monitor firmware (VEO Wi-Fi range): 3 record(s), with affected versions and fixes.
CVE-2026-86585
High · 7.7
CWE-347 Sep 16, 2026
Improper Verification of the Firmware Signature vulnerability
The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware.
CVE-2026-86474
High · 7.7
CWE-295 Sep 16, 2026
Improper Certificate Validation in the Firmware Download vulnerability
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.
CVE-2026-85628
High · 7.0
CWE-319 Sep 16, 2026
Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability
Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.