CVE-2026-86474 | BDVDB-2026-375010 Detail
Fermax Electronica S.A.U.DUOX PLUS monitor firmware (VEO Wi-Fi range)
Description#
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.
Impact#
CAPEC-94 Adversary in the Middle (AiTM)
Weaknesses#
- CWE-295 Improper Certificate Validation
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.