PT-2025-47014 · Ubee · Ubee Evw3226

Published 2025-11-14 · Updated 2025-11-18 · CVE-2016-15056

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Ubee EVW3226 versions up to and including 1.0.20

Description The Ubee EVW3226 cable modem/router firmware stores configuration backup files in the web root after they are generated for download. These files remain accessible without authentication until a reboot of the device. An attacker on the local network can request the file 'Configuration file.cfg' to obtain the backup archive. The backup files are not encrypted and contain sensitive information, including the plaintext admin password, potentially allowing full compromise of the device.

Recommendations Update to a firmware version later than 1.0.20.

Fix

Weakness Enumeration

CWE-538

Related Identifiers

CVE-2016-15056

Affected Products

Ubee Evw3226

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2016-15056 · Security Note
• https://web.archive.org/web/20160726145043/http://search-lab.hu/advisories/122-ubee-evw3226-modem-router-multiple-vulnerabilities · Note
• https://t.me/CVEtracker/37375 · Telegram Post
• https://vulncheck.com/advisories/ubee-evw3226-unauthenticated-backup-file-disclosure · Note
• https://t.me/cveNotify/143226 · Telegram Post
• https://seclists.org/fulldisclosure/2016/Jul/66 · Note
• https://exploit-db.com/exploits/40156 · Note
• https://web.archive.org/web/20160403014231/http://ubeeinteractive.com/products/cable/evw3226 · Note