You do not have permission to edit this page, for the following reasons:
The Ebyte NA111-M is an industrial IoT gateway running firmware 9013-2-17, affected by 13 CVEs disclosed in CISA advisory ICSA-26-239-05 (August 2026) . The most critical flaws include CVE-2026-73125 (CVSS 9.8, missing authentication on web management interface, allowing unauthenticated remote attackers to access sensitive configuration and modify device settings) and CVE-2026-76179 (CVSS 9.8, improper authentication token protection enabling session hijacking) . Additional issues span CSRF, cleartext transmission/storage of credentials, weak cryptographic algorithms, and lack of privilege separation . The vendor acknowledged the vulnerabilities and stated a patch was under development but has not provided a patch or responded to CISA coordination requests as of the advisory publication . EPSS scores for the critical CVEs (0.0053, 0.00434) indicate no widespread active exploitation has been observed, but the authentication bypass nature of the flaws makes them severe for internet-exposed industrial deployments . Users are advised to contact Ebyte directly and isolate affected devices from public networks.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
