IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-02-25 16:23

MODIFIED

2026-02-25 16:23

EPSS (Prob. Exploit)

0.23%

Top 87.1%

DATA SOURCES:

NVD 🔗 2026-02-25 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a new mesh device to the network to gain access to sensitive information, including the password for admin access to the web interface and the Wi-Fi passwords.This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-306

> CWE DETAILED DESCRIPTIONS

CWE-306: Missing Authentication for Critical Functionality - The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

> HISTORIQUE DES MODIFICATIONS

Première apparition

25/02/2026 16:23

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:58

CWE

Champ modifié: Description CWE

Ancienne valeur:

CWE-306: Missing Authentication for Critical Function - The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of res...

Nouvelle valeur:

📊 ENRICHISSEMENT 01/03/2026 06:46

CWE