CPTrans-ME-X
by XING
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-70403 | Cri | 0.64 | 9.8 | — | Sep 4, 2026 | XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of the credential may log in to the affected device. | ||
| CVE-2026-69657 | Cri | 0.64 | 9.8 | — | Sep 4, 2026 | XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device. | ||
| CVE-2026-62928 | Cri | 0.64 | 9.8 | — | Sep 4, 2026 | XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected. | ||
| CVE-2026-66840 | Hig | 0.49 | 7.5 | — | Sep 4, 2026 | XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system information may be leaked. |
- risk 0.64cvss 9.8epss —
XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of the credential may log in to the affected device.
- risk 0.64cvss 9.8epss —
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device.
- risk 0.64cvss 9.8epss —
XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.
- risk 0.49cvss 7.5epss —
XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system information may be leaked.