PT-2026-21753 · Binardat · 10G08-0800Gsm Network Switch

Kazuma Matsumoto · CVE-2026-27515 · Publicado 2026-02-24 · Atualizado 2026-03-01

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209

Description The web management interface generates predictable numeric session identifiers. This predictability allows an attacker to guess valid session IDs, enabling session hijacking.

Recommendations Update the firmware to version V300SP10260209 or later.

Correção

Use of Insufficiently Random Values

Enumeração de Fraquezas

CWE-330

Identificadores relacionados

CVE-2026-27515

Produtos afetados

10G08-0800Gsm Network Switch

Referências · 11

• https://twitter.com/CVEnew/status/2026676460640154057 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2026341707005178102 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-27515 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-27515 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2026425193657212987 · Publicação no Twitter
• https://vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-predictable-session-identifiers · Nota
• https://t.me/CVEtracker/45618 · Publicação no Telegram
• https://binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch · Nota
• https://twitter.com/cracbot/status/2028062899340800028 · Publicação no Twitter
• https://twitter.com/CveTodo/status/2026337448922370085 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2026336745814417526 · Publicação no Twitter