Skip to main content

Sd 330Ac EUVDEUVD-2026-23752

| CVE-2026-32959 HIGH
Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
2026-04-20 jpcert GHSA-gj69-pmwp-f535
Information Disclosure Sd 330Ac Amc Manager
8.2
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
8.2 HIGH
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

8
Analysis Updated
Apr 20, 2026 - 04:29 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Apr 20, 2026 - 04:22 vuln.today
cvss_changed
Severity Changed
Apr 20, 2026 - 04:22 NVD
MEDIUM HIGH
CVSS changed
Apr 20, 2026 - 04:22 NVD
5.9 (MEDIUM) 8.2 (HIGH)
Analysis Generated
Apr 20, 2026 - 04:10 vuln.today
EUVD ID Assigned
Apr 20, 2026 - 04:00 euvd
EUVD-2026-23752
Analysis Generated
Apr 20, 2026 - 04:00 vuln.today
CVE Published
Apr 20, 2026 - 03:18 nvd
HIGH 8.2

DescriptionCVE.org

SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a use of a broken or risky cryptographic algorithm. Information in the traffic may be retrieved via man-in-the-middle attack.

AnalysisAI

Weak cryptographic implementation in Silex Technology SD-330AC wireless LAN adapters (v1.42 and earlier) and AMC Manager software (v5.0.2 and earlier) allows network-positioned attackers to intercept and decrypt network traffic through man-in-the-middle attacks. The vulnerability stems from use of broken or risky cryptographic algorithms (CWE-327), enabling confidentiality breach of transmitted data. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Position on network segment
Delivery
Deploy ARP spoofing
Exploit
Intercept encrypted sessions
Execution
Downgrade to weak ciphers
Persist
Decrypt captured traffic
Impact
Exfiltrate credentials/data
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Attacker must achieve man-in-the-middle network positioning between SD-330AC devices and AMC Manager server or between devices and their wireless clients (AT:P in CVSS vector confirms positioning requirement). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Real-world exploitation risk is moderate despite the 8.2 CVSS score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker connected to the same network segment as SD-330AC devices deploys ARP spoofing tools to position themselves between the wireless adapter and its management server running AMC Manager software. The attacker intercepts TLS/SSL sessions encrypted with weak ciphers or outdated protocol versions, using tools like Wireshark with protocol-specific decryption plugins or Bettercap's SSL stripping capabilities to downgrade connections. …
Remediation Apply vendor-supplied patches by upgrading SD-330AC firmware to version 1.43 or later and AMC Manager software to version 5.0.3 or later (exact fix versions should be confirmed from Silex Technology security advisory at https://www.silex.jp/support/security-advisories/en/2026-001). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Identify all SD-330AC devices and AMC Manager installations in your environment using network discovery tools; isolate affected devices to trusted, segmented networks only. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Sd 330Ac

View all
CVE-2026-32956 CRITICAL
9.3 Apr 20

Remote code execution in silex technology SD-330AC and AMC Manager allows unauthenticated network attackers to execute a
CVE-2026-32955 HIGH
8.7 Apr 20

Stack-based buffer overflow in silex technology's SD-330AC (Ver.1.42 and earlier) and AMC Manager (Ver.5.0.2 and earlier
CVE-2026-32965 HIGH
8.7 Apr 20

SD-330AC wireless LAN modules and AMC Manager devices from silex technology allow unauthenticated remote attackers to mo
CVE-2026-32960 HIGH
7.1 Apr 20

Authentication bypass in silex technology SD-330AC (≤1.42) and AMC Manager (≤5.0.2) allows remote attackers to gain unau
CVE-2026-32957 MEDIUM
6.9 Apr 20

Unauthenticated arbitrary file upload in Silex Technology SD-330AC and AMC Manager firmware maintenance functions allows
CVE-2026-32962 MEDIUM
6.9 Apr 20

SD-330AC and AMC Manager by Silex Technology lack authentication controls on critical configuration functions, allowing

CVE-2026-32964 MEDIUM
6.9 Apr 20

CRLF injection in Silex Technology SD-330AC and AMC Manager allows unauthenticated remote attackers to inject arbitrary

CVE-2026-32961 MEDIUM
6.9 Apr 20

Heap-based buffer overflow in Silex SD-330AC and AMC Manager packet processing allows remote unauthenticated attackers t
CVE-2026-32958 MEDIUM
6.9 Apr 20

Hard-coded cryptographic keys in Silex Technology SD-330AC and AMC Manager enable attackers to forge firmware updates th
CVE-2026-32963 MEDIUM
5.1 Apr 20

Reflected cross-site scripting (XSS) in Silex Technology SD-330AC and AMC Manager allows remote attackers to execute arb

Same weakness CWE-327 – Use of a Broken or Risky Cryptographic Algorithm

View all
CVE-2025-2539 HIGH POC
7.5
CVE-2025-69929 CRITICAL POC
9.8
CVE-2026-26219 CRITICAL POC
9.1
CVE-2025-62514 HIGH POC
8.3
CVE-2025-34208 HIGH POC
7.5
CVE-2025-63912 HIGH POC
7.5
CVE-2025-59408 HIGH POC
7.3
CVE-2026-21718 CRITICAL
10.0

Same technique Information Disclosure

View all
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2014-6324 HIGH POC
8.8
CVE-2017-0213 HIGH POC
7.3
CVE-2016-7255 HIGH POC
7.8
CVE-2010-0232 HIGH POC
7.8
CVE-2025-30066 HIGH POC
8.6
CVE-2025-54236 CRITICAL POC
9.1

Share

EUVD-2026-23752 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy