Vulnerabilidades de Fermax Electronica S.A.U.
CVEs publicadas que afetam produtos de Fermax Electronica S.A.U.: 4 registro(s), com severidade, exploração e correções.
CVE-2026-86585
Alta · 7.7
CWE-347 16/09/2026
Improper Verification of the Firmware Signature vulnerability
The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware.
CVE-2026-86474
Alta · 7.7
CWE-295 16/09/2026
Improper Certificate Validation in the Firmware Download vulnerability
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.
CVE-2026-86443
Média · 6.9
CWE-312 16/09/2026
Cleartext Storage of Sensitive Information Vulnerability
Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account.
CVE-2026-85628
Alta · 7.0
CWE-319 16/09/2026
Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability
Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.