Medium severityNVD Advisory· Published Sep 29, 2025· Updated Apr 15, 2026
CVE-2025-11155
CVE-2025-11155
Description
The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials.
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.