Vulnerabilidades do Mennekes Amtron
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Mennekes Amtron: 2 registro(s), com versões afetadas e correções.
CVE-2026-8980
Crítica · 9.3
CWE-269 28/05/2026
Privilege Escalation
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of the admin (operator) and manufacturer accounts via crafted POST requests.
CVE-2026-8979
Crítica · 9.3
CWE-287 28/05/2026
Authentication Bypass
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass. An unauthenticated remote attacker can change the password of the user account via a crafted POST request to the /operator/operator endpoint.