CVE-2026-77977
Ebyte NA111-M Missing Authentication for Critical Function
- State
- Published
- Severity
- 7.2 High
- Published
- Aug 27, 2026
- Updated
- Oct 5, 2026
- Reserved
- Aug 21, 2026
Description
Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings, resulting in a loss of configuration and service availability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.2 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N | icscert |
| 3.1 | 8.1 High | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H | icscert |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Ebyte NA111-M FirmwareEbyte |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.