EUVD-2026-68613
GHSA-95vr-mjhg-w4w3
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Low-privileged network authentication required; no scope change as impact is confined to the affected device's own CIA.
Primary rating from Vendor (icscert).
CVSS VectorVendor: icscert
Lifecycle Timeline
6DescriptionCVE.org
The affected Ebyte
product does not provide separation between limited and administrative management functions. A low privileged authenticated attacker could access security sensitive configuration functions and modify settings that affect the confidentiality, integrity, or availability of the device.
AnalysisAI
Missing authorization controls in the Ebyte NA111-M industrial wireless module firmware allow a low-privileged authenticated user to access and modify administrative configuration functions that should be restricted to privileged accounts. The device fails to enforce privilege separation between limited-user and administrator roles, meaning any authenticated operator-level account can alter security-sensitive settings and affect device confidentiality, integrity, and availability. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privileged authenticated account on the Ebyte NA111-M device - unauthenticated external attackers are excluded. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 reflects high CIA impact with a network attack vector, low complexity, and low privilege requirement - metrics that are internally consistent with the description of a network-reachable management interface accessible to any authenticated user. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult CISA ICS Advisory ICSA-26-237-06 at https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06 for the latest vendor guidance; no specific patched firmware version is identified in the available intelligence data, so patch availability must be confirmed directly with Ebyte or via the CSAF advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Ebyte NA111-M devices in production and document network topology, deployment context, and authorized user roles. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allShare
External POC / Exploit Code
Leaving vuln.today