CVE-2026-111100 | BDVDB-2026-394461 Detail

Description#

The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting vulnerable devices and preparing targeted credential attacks.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-10-22Record published in the CVE List.
2. Version 22026-10-23Most recent update recorded in the CVE List.