Home

Description

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could obtain privilege information by using the command Version via the path: /upgrade/query.php?cmd=p+3&3Bversion resulting in a information disclosure. This issue affects Regesta Smart HD-PLC - TLDPH16D2: 11.02.05.10.02.

PUBLISHED Reserved 2026-02-24 | Published 2026-06-17 | Updated 2026-06-17 | Assigner HackRTU




MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-201 Insertion of sensitive information into sent data

Product status

Default status
unknown

11.02.05.10.02
affected

11.02.06.00.02
unaffected

Timeline

2026-02-20:Vulnerability detection by the researchers
2026-02-22:Report from researchers to the CNA of HackRTU
2026-02-25:Report from HackRTU CNA to the provider
2026-05-29:New version published by the provider
2026-06-17:Vulnerabilities published by HackRTU's CNA

Credits

Aarón Flecha Menéndez finder

Víctor Bello Cuevas finder

References

www.hackrtu.com/blog/CNA-HRTU-0002/ technical-description patch

www.hackrtu.com/blog/CNA-CVE-2026-27868/ technical-description patch

www.teldat.com/es/ product

support.teldat.com/...mart_nessum_series_installation(1).pdf product

support.teldat.com/...lobal-support&none=true&language=en-US patch

cve.org (CVE-2026-27868)

nvd.nist.gov (CVE-2026-27868)

Download JSON