PT-2026-8234 · Unknown · Micca Ke700

Danilo Erazo · Publicado 2026-02-15 · Atualizado 2026-02-15 · CVE-2026-2539

Positive Technologies (AI Summary)

CVSS v4.0

5.6

Média

Vetor base

AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:H/U:X

Name of the Vulnerable Software and Affected Versions Micca KE700 versions (affected versions not specified)

Description The RF communication protocol does not encrypt data frames. An attacker equipped with a radio interception tool, such as an SDR, can capture cleartext random numbers and counters. This captured information is sensitive and required for authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2026-2539

Produtos afetados

Micca Ke700

Referências · 4

• https://t.me/CVEtracker/44756 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-2539 · Nota de Segurança
• https://asrg.io/security-advisories/cve-2026-2539-micca-ke700-cleartext-transmission-of-key-fob-id · Nota
• https://twitter.com/CVEnew/status/2022994285843435983 · Publicação no Twitter