Vulnerabilidades do Ebyte Ebyte NE2-D11 Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ebyte Ebyte NE2-D11 Firmware: 4 registro(s), com versões afetadas e correções.
CVE-2026-77975
Média · 6.5
CWE-312 31/08/2026
Ebyte NA111-M Cleartext Storage of Sensitive Information
The affected Ebyte
product exports administrative credentials and other
sensitive configuration information without adequate protection. An
unauthenticated attacker on the adjacent network who can obtain an
exported configuration file could recover valid credentials and use them
to access the device or similarly configured systems.
CVE-2026-76945
Alta · 7.5
CWE-603 27/08/2026
Ebyte NE2-D11 Use of Client-Side Authentication
The affected Ebyte device relies on client-managed authentication tokens
without sufficient server-side validation. An attacker may replay or
manipulate authentication tokens to gain unauthorized access to
administrative functionality.
CVE-2026-75813
Alta · 7.5
CWE-862 27/08/2026
Ebyte NE2-D11 Missing Authorization
Certain configuration endpoints may lack proper server-side
authorization checks, allowing unauthorized users to access or modify
sensitive device settings. This could result in full compromise of
device functionality.
CVE-2026-73839
Média · 4.6
CWE-522 27/08/2026
Ebyte NE2-D11 Insufficiently Protected Credentials
Administrative credentials may be exposed in plaintext within the Ebyte
device's management interface, increasing the risk of credential
compromise through visual or remote observation. This undermines the
confidentiality of device access.