PT-2026-25944 · Edimax · Edimax Gs-5008Pl

Kazuma Matsumoto · CVE-2026-32838 · Publicado 2026-03-17 · Atualizado 2026-03-18

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Edimax GS-5008PL firmware versions 1.00.54 and earlier

Description The web management interface uses unencrypted HTTP, lacking TLS or SSL encryption. Attackers on the same network can intercept management traffic, potentially capturing administrator credentials and sensitive configuration data.

Recommendations Update to a version that implements TLS or SSL encryption for the web management interface.

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

BDU:2026-03526

CVE-2026-32838

Produtos afetados

Edimax Gs-5008Pl

Referências · 7

• https://edimax.com/edimax/merchandise/merchandise_detail/data/edimax/us/smb_legacy_switches/gs-5008pl · Nota
• https://vulncheck.com/advisories/edimax-gs-5008pl-transmits-credentials-over-cleartext-http · Nota
• https://bdu.fstec.ru/vul/2026-03526 · Nota de Segurança
• https://vulncheck.com/advisories/edimax-gs-5008pl-transmits-credentials-over-cleartext · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32838 · Nota de Segurança
• https://twitter.com/CVEnew/status/2034136464888381701 · Publicação no Twitter
• https://edimax.com/edimax/merchandise/merchandise_list/data/edimax/us/smb_legacy_products · Nota