EUVD-2026-80585
GHSA-mmjj-x36j-f536
Severity by source
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent Wi-Fi Direct link (AV:A); attacker must be present during user-driven pairing, so AC:H and UI:R; leaked home Wi-Fi password enables broader network access (S:C, C:H), no integrity/availability impact.
Primary rating from Vendor (FERMAX).
CVSS VectorVendor: FERMAX
Lifecycle Timeline
3DescriptionCVE.org
Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.
AnalysisAI
Cleartext transmission of home Wi-Fi credentials during Wi-Fi Direct pairing between the Fermax DuoxMe mobile app and VEO/VEO-XS Wi-Fi monitors allows an unauthenticated attacker on the adjacent Wi-Fi Direct network to intercept the home network password while onboarding is in progress. Exploitation affects deployments running DuoxMe before 4.3.4 or monitor firmware before 01.50.001, and requires the attacker to be within RF range and listening during the narrow pairing window (UI:P, AT:P), with no public exploit identified at time of analysis. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires the attacker to be on the Wi-Fi Direct network that the VEO/VEO-XS Wi-Fi monitor exposes, meaning physical radio proximity to the target home. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine but bounded confidentiality issue, not a high-urgency remote-takeover flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade the DuoxMe application to 4.3.4 or later and the VEO/VEO-XS monitor firmware to 01.50.001 or later, applying both since the fix spans the app-side and device-side pairing handshake. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all DuoxMe app installations and VEO/VEO-XS monitor deployments, confirm which app and firmware versions are in use (DuoxMe before 4.3.4 and monitor firmware before 01.50.001 are the affected baselines), and instruct installers and technicians to pause Wi-Fi Direct onboarding until further notice except where operationally unavoidable; where onboarding must proceed, require that monitors be provisioned only onto a temporary, disposable SSID that is never the resident or building production WLAN. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today