Vulnerability details
CVE-2026-85628
Fermax Electronica S.A.U. DUOX PLUS monitor firmwareFermax Electronica S.A.U. DuoxMe
Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability
CVSS 4.0
7.0High
Official description
Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.0High | 4.0 | CVEProject cvelistV5 (CNA) (FERMAX) | CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Fermax Electronica S.A.U. | DUOX PLUS monitor firmware (VEO Wi-Fi range) | v < 01.50.001 | CVEProject cvelistV5 (CNA) |
| Fermax Electronica S.A.U. | DuoxMe | v < 4.3.4 | CVEProject cvelistV5 (CNA) |
References and advisories
1- https://fermax.com/security-advisories vendor-advisory
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-09-16
- Last updated
- 2026-09-16
- State
- Published
- Assigner (CNA)
- FERMAX
Exploit prediction (EPSS)
0.08%
Probability of exploitation in 30 days
0.3%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-319Cleartext Transmission of Sensitive Information