EUVD-2026-67294
GHSA-6x82-vfrh-gxpc
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Remote unauthenticated bypass of an admin service (AV:N/AC:L/PR:N/UI:N) yielding command execution gives full C/I/A impact on the device; scope unchanged as impact stays on the device.
Primary rating from Vendor (icscert).
CVSS VectorVendor: icscert
Lifecycle Timeline
6DescriptionCVE.org
Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to complete device compromise.
AnalysisAI
Authentication bypass in the Xiiaozet LK100W administrative service lets remote unauthenticated attackers reach privileged functionality and obtain command execution, per CISA ICS advisory ICSA-26-239-01. Because the flawed check guards an admin interface, a successful bypass leads to full device takeover. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to the Xiiaozet LK100W administrative service; the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) indicates no authentication, no user interaction, and no special attack requirements against the exposed admin interface. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The supplied CVSS 4.0 base vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H, score 9.3 Critical) describes a fully remote, low-complexity, unauthenticated attack with high confidentiality, integrity, and availability impact - a maximal-severity profile consistent with an unauthenticated admin bypass yielding command execution. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch or fixed version is identified in the provided data; consult CISA ICS advisory ICSA-26-239-01 (https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01) and its CSAF file (https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-239-01.json) for the authoritative fix and vendor mitigations. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify and inventory all Xiiaozet LK100W devices across your network using asset management or network discovery tools; immediately isolate affected devices from untrusted networks or restrict administrative access to authorized IP ranges only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Xiiaozet Lk100W
View allAuthentication bypass in the Xiiaozet LK100W device lets a remote attacker invoke a critical management function with no
OS command injection in the Xiiaozet LK100W web-based management interface enables network-accessible, low-privilege aut
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today