Which versions of Ff Rfi079I4 are affected by EUVD-2026-78334?

Lite-On FF-RFI079I4 and FF-RFI078I4 5G FlexFi appliances running firmware below 02.01.15 can be fully taken over by an authenticated SSH user who has already reached privileged 'enable' mode,…. A patch is available.

How to fix or mitigate EUVD-2026-78334?

Within 24 hours, inventory all FF-RFI079I4 and FF-RFI078I4 5G FlexFi devices and confirm their firmware versions, then treat any unit below 02.01.15 as a priority remediation target; simultaneously restrict SSH and privileged 'enable' access to a small set of trusted administrative accounts and require multifactor authentication on the management plane. Within 7 days, deploy the vendor-released firmware 02.01.15 (or later) to all affected appliances, starting with internet-reachable and business-critical units, and rotate credentials and SSH keys for any account with privileged access to those devices. Within 30 days, verify that all affected devices report firmware 02.01.15 or above, audit management-plane logs for unexpected command execution or unauthorized 'enable' transitions, and update change-management and asset-inventory processes to ensure firmware currency and least-privilege administration are enforced for edge appliances going forward.

Ff Rfi079I4 EUVD-2026-78334

Q: What is the CVSS score of EUVD-2026-78334?

EUVD-2026-78334 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

| CVE-2026-80217 HIGH

Hidden Functionality (CWE-912)

2026-09-15 jpcert

GHSA-g28v-9m8c-rvf6

Information Disclosure Ff Rfi079I4 Ff Rfi078I4

8.7

CVSS 4.0 · Vendor: jpcert

Severity by source

Vendor (jpcert) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (jpcert) · only source for this CVE.

CVSS VectorVendor: jpcert

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 11:20 vuln.today

Patch available

Sep 15, 2026 - 10:01 EUVD

CVSS changed

Sep 15, 2026 - 09:22 NVD

8.8 (HIGH) 8.7 (HIGH)

CVE Published

Sep 15, 2026 - 08:50 cve.org

HIGH 8.7

DescriptionCVE.org

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands.

AnalysisAI

Authenticated SSH users who can reach privileged 'enable' mode on Lite-On FF-RFI079I4 and FF-RFI078I4 5G FlexFi devices can invoke an undocumented hidden function (CWE-912) to execute arbitrary OS commands, giving full control of the appliance with high confidentiality, integrity, and availability impact. Firmware versions below 02.01.15 are affected and a vendor fix is available. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, inventory all FF-RFI079I4 and FF-RFI078I4 5G FlexFi devices and confirm their firmware versions, then treat any unit below 02.01.15 as a priority remediation target; simultaneously restrict SSH and privileged 'enable' access to a small set of trusted administrative accounts and require multifactor authentication on the management plane. …

Threat intelligence, references, and detailed analysis are available after sign-in.