Home

Description

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to allowing authenticated remote attackers to obtain SMTP plaintext passwords through the web frontend.

PUBLISHED Reserved 2026-01-20 | Published 2026-01-20 | Updated 2026-01-20 | Assigner twcert




MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

MEDIUM: 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-522 Insufficiently Protected Credentials

Product status

Default status
unaffected

Any version before 1.03.23.01
affected

References

www.twcert.org.tw/tw/cp-132-10642-3b808-1.html third-party-advisory

www.twcert.org.tw/en/cp-139-10643-2f8d7-2.html third-party-advisory

cve.org (CVE-2026-1223)

nvd.nist.gov (CVE-2026-1223)

Download JSON