Skip to main content

Ebyte NE2-D11 EUVDEUVD-2026-67287

| CVE-2026-75548 MEDIUM
Improper Restriction of Rendered UI Layers or Frames (CWE-1021)
2026-08-27 icscert GHSA-5jcv-hg7p-4r48
XSS Ebyte Ne2 D11 Firmware
5.3
CVSS 4.0 · Vendor: icscert
Share

Severity by source

Vendor (icscert) PRIMARY
5.3 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.4 MEDIUM

Attacker serves malicious page remotely without privileges (AV:N, PR:N, AC:L) but requires an authenticated admin to interact (UI:R); impact is limited to minor config tampering (I:L) and incidental info exposure (C:L) with no availability effect.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (icscert).

CVSS VectorVendor: icscert

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
P
Scope
X

Lifecycle Timeline

2
CVSS changed
Aug 28, 2026 - 00:22 NVD
5.4 (MEDIUM) 5.3 (MEDIUM)
Analysis Generated
Aug 28, 2026 - 00:11 vuln.today

DescriptionCVE.org

The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive actions.

AnalysisAI

Clickjacking vulnerability in the Ebyte NE2-D11 industrial IoT device web management interface enables a remote unauthenticated attacker to embed the administrative UI within a crafted external webpage. By luring an authenticated administrator to visit the malicious page, an attacker can trick that administrator into submitting unintended configuration changes or triggering disruptive actions against the device. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The target must be an authenticated administrator with an active browser session to the Ebyte NE2-D11 web management interface at the time of the attack. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 5.4 Medium score accurately reflects a conditionally exploitable but non-trivial attack. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Operators should review the CISA ICS advisory at https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06 and apply any vendor-released firmware update for the Ebyte NE2-D11 as soon as one is available; patch status is confirmed per vendor advisory, but an exact fixed firmware version is not independently confirmed from available data. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Ebyte Ne2 D11 Firmware

View all
CVE-2026-73125 CRITICAL
9.3 Aug 27

Authentication bypass in the Ebyte NE2-D11 firmware web management interface lets unauthenticated remote attackers reach
CVE-2026-71187 CRITICAL
9.3 Aug 27

Authentication bypass in the Ebyte NE2-D11 serial-to-Ethernet gateway firmware lets unauthenticated remote attackers gai
CVE-2026-76179 CRITICAL
9.3 Aug 27

Authentication token theft and session impersonation affects the web management interface of Ebyte NE2-D11 industrial ga
CVE-2026-69658 CRITICAL
9.3 Aug 27

Cleartext transmission of MQTT credentials and control traffic in Ebyte NE2-D11 firmware allows network-positioned attac
CVE-2026-76945 HIGH
8.7 Aug 27

Unauthorized administrative access in Ebyte NE2-D11 firmware is possible because the device delegates authentication sta
CVE-2026-76940 HIGH
8.7 Aug 27

Unrestricted authentication attempts in Ebyte NE2-D11 firmware expose password-protected deployments to automated brute-
CVE-2026-75813 HIGH
8.7 Aug 27

Unauthenticated remote access to configuration endpoints in the Ebyte NE2-D11 industrial wireless module firmware allows
CVE-2026-73809 HIGH
8.7 Aug 27

Cleartext transmission of authentication and session credentials in the Ebyte NE2-D11 gateway web management interface e
CVE-2026-75814 HIGH
8.6 Aug 27

Cross-site request forgery in the Ebyte NE2-D11 firmware's web management interface allows an unauthenticated remote att
CVE-2026-77977 HIGH
7.2 Aug 27

Unauthenticated reboot and factory-reset of Ebyte NE2-D11 gateways is possible from the adjacent network when default cr
CVE-2026-73839 MEDIUM
5.1 Aug 27

Plaintext administrative credential exposure in the Ebyte NE2-D11 firmware management interface allows anyone with physi

Same weakness CWE-1021 – Improper Restriction of Rendered UI Layers or Frames

View all
CVE-2022-3167 HIGH POC
8.8
CVE-2021-3734 HIGH POC
8.8
CVE-2019-16371 HIGH POC
8.2
CVE-2024-33377 HIGH POC
8.1
CVE-2020-13119 HIGH POC
8.1
CVE-2022-1803 MEDIUM POC
6.9
CVE-2024-2177 MEDIUM POC
6.8
CVE-2024-4950 MEDIUM POC
6.5

Same technique XSS

View all
CVE-2017-9248 CRITICAL POC
9.8
CVE-2020-3580 MEDIUM POC
6.1
CVE-2013-1710 CRITICAL POC
10.0
CVE-2013-7389 MEDIUM POC
4.3
CVE-2021-25299 MEDIUM POC
6.1
CVE-2014-2120 MEDIUM
6.1
CVE-2023-40000 HIGH POC
8.3
CVE-2024-52875 HIGH POC
8.8

Share

EUVD-2026-67287 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy