N A CVE-2026-78745

Weyon/HiDPT HiDPTAndroid devices (Hi3751V350 chipset) are vulnerable to unauthenticated remote code execution via an exposed debug interface, allowing any network-connected attacker to compromise devices without credentials. Publicly available exploit code lowers barriers to attack, and the absence of vendor patches means affected organizations have no clear remediation path. Device compromise enables unauthorized data access, use as infrastructure attack nodes, or denial of service.

Within 24 hours, identify all Weyon/HiDPT HiDPTAndroid devices in your network and determine if the ADB debug interface is reachable from untrusted networks; immediately implement firewall rules to block internet access to ADB ports (default 5037/tcp) on any externally reachable devices. Within 7 days, isolate affected devices to a restricted VLAN, implement egress filtering to monitor for command injection or exfiltration, and restrict administrative access to hardened jump-hosts only. Within 30 days, contact Weyon/HiDPT for clarification on patch availability or end-of-life status, and initiate a device replacement program, as an exposed privileged debug interface cannot be fully secured through network controls alone.

No vendor-released patch identified at time of analysis. Interim mitigations: (1) Firewall rules restricting inbound access to ADB ports (default 5037/tcp), limiting connections to trusted administration networks only. (2) Network segmentation isolating affected devices from critical systems and data. (3) Egress monitoring and intrusion detection to identify command execution or reverse-shell attempts. (4) Disable or restrict access to remote management interfaces where possible. (5) Physical isolation of non-critical devices pending replacement. Note: Network controls provide temporary containment but not remediation; vendor patch or device replacement remains necessary for complete security.