CVE-2026-22101

MEDIUM CVSS 4.0: 5.1 EPSS 0.14%
Updated Oct 19, 2026
Parameter Value
CVSS 5.1 (MEDIUM)
Type CWE-200 (Information Exposure)
Public PoC No

The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi network and password.

Attack Parameters

Attack Vector
Physical
Requires physical access
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption

CVSS Vector v4.0

Weakness Type (CWE)