Naxclow Firmware EUVD-2026-36538

No vendor-released patch version has been identified from the available data; the CPE wildcard entries suggest no patched firmware release has been scoped at time of analysis. Consult the CISA ICS-CERT advisory ICSA-26-162-02 at https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-02 and the corresponding CSAF file at https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-162-02.json for updated remediation guidance from the vendor. Until a firmware patch is available, the following specific compensating controls apply: physically restrict access to deployed devices using tamper-evident enclosures or security screws that require tools to open (this raises the attacker's time-on-target and detection risk, though it does not eliminate the vulnerability); deploy devices only in locations with physical security controls such as CCTV coverage or restricted access zones; consider network segmentation of the WiFi network used by these devices so that PSK compromise limits lateral movement; and monitor for unauthorized WiFi client connections using the host access point's client association logs. Disabling the UART at the hardware level (e.g., depopulating pads) is the most effective compensating control but requires vendor or integrator intervention and voids typical support agreements.