PT-2026-48956 · Naxclow · Smart Doorbell X3+3

Published 2026-06-12 · Updated 2026-06-12 · CVE-2026-50099

Mitre

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled, run with default serial settings, and drop to an interactive RT-Thread shell that permits arbitrary memory reads, enabling full firmware extraction. An attacker with brief physical access, common for outdoor-mounted devices, can therefore recover WiFi credentials and bootstrap firmware-side attacks.

Fix

Weakness Enumeration

CWE-538

Related Identifiers

CVE-2026-50099

Affected Products

Smart Doorbell X3

V720

Smarthome

Ix Cam

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-50099 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-162-02.json · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-162-02 · Note