PT-2026-66670 · Advantech · Ecu-1251D08.04

CVE-2026-6890 · Publicado 2026-07-31 · Atualizado 2026-07-31

Mitre

CVSS v4.0

7.1

Alta

Vetor base

AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

A use of default credentials vulnerability in the Advantech ECU-1251D allows a remote attacker to gain unauthorised access to the device via SSH using the default root account with no password, as documented in the device manual. No prompt or guidance to change these credentials is provided during device configuration, increasing the risk of exploitation.

Correção

Identificadores relacionados

CVE-2026-6890

Produtos afetados

Ecu-1251D08.04

Referências · 2

• https://csa.gov.sg/alerts-and-advisories/alerts/al-2026-095 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-6890 · Nota de Segurança