CVE-2026-108578
Neterbit NW-431F Embedded Web Server sms.json information disclosure
- State
- Published
- Severity
- 6.9 Medium
- Published
- Oct 11, 2026
- Updated
- Oct 13, 2026
- Reserved
- Oct 10, 2026
Description
A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X | VulDB |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R | VulDB |
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:P/I:N/A:N/E:ND/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
NW-431FNeterbit |
|
References
- VDB-416235 | Neterbit NW-431F Embedded Web Server sms.json information disclosurevdb-entry
- VDB-416235 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- CVE-2026-108578 | CVE Analysis and Reportthird-party-advisory
- Submit #956592 | Neterbit NW-431F 20250715 Information Disclosure / Missing Authentication (CWE-200, CWE-30third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.