CVE-2026-32296
Sipeed NanoKVM unauthenticated Wi-Fi configuration endpoint
Résumé
Sipeed NanoKVM unauthenticated Wi-Fi configuration endpoint
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate the KVM process.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web raw.githubusercontent.com
- web cve.org
- web eclypsium.com