{"id":"CVE-2026-6274","state":"PUBLISHED","title":"Authentication Bypass in DTS Electronics' Redline WR3200","description":"Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Redline WR3200: from 7.1.3 before 7.1.8.","publishedAt":"2026-06-05T09:01:43.955Z","updatedAt":"2026-06-08T18:30:34.697Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"TR-CERT"},"assigner":"TR-CERT","products":["DTS Electronics Industry and Trade Ltd. Co. Redline WR3200"],"affected":[{"vendor":"DTS Electronics Industry and Trade Ltd. Co.","product":"Redline WR3200","defaultStatus":"unaffected","versions":[{"version":"7.1.3","status":"affected","lessThan":"7.1.8","versionType":"custom"}]}],"references":["https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0321","https://github.com/bugresearch/CVE-2026-6274"],"weaknesses":["CWE-287","CWE-306","CWE-1390"],"ingestedAt":"2026-10-29T20:12:49.727Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/6xxx/CVE-2026-6274.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-6274","state":"PUBLISHED","datePublished":"2026-06-05T09:01:43.955Z","dateUpdated":"2026-06-08T18:30:34.697Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2026-04-14T13:36:24.251Z"},"containers":{"cna":{"title":"Authentication Bypass in DTS Electronics' Redline WR3200","descriptions":[{"lang":"en","value":"Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Redline WR3200: from 7.1.3 before 7.1.8."}],"affected":[{"vendor":"DTS Electronics Industry and Trade Ltd. Co.","product":"Redline WR3200","defaultStatus":"unaffected","versions":[{"version":"7.1.3","status":"affected","lessThan":"7.1.8","versionType":"custom"}]}],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0321","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"CRITICAL","baseScore":9.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","lang":"en","description":"CWE-287 Improper Authentication","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-306","lang":"en","description":"CWE-306 Missing authentication for critical function","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-1390","lang":"en","description":"CWE-1390 Weak Authentication","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-06-05T09:01:43.955Z"},"datePublic":"2026-06-05T08:46:00.000Z","impacts":[{"capecId":"CAPEC-1","descriptions":[{"lang":"en","value":"CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}],"credits":[{"lang":"en","value":"Deniz BEKTAŞ","type":"finder"}],"source":{"defect":["TR-26-0321"],"advisory":"TR-26-0321","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.2"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-05T20:21:18.983629Z","id":"CVE-2026-6274","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-05T20:21:36.106Z"}},{"title":"CVE Program Container","references":[{"url":"https://github.com/bugresearch/CVE-2026-6274"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2026-06-08T18:30:34.697Z"},"x_generator":{"engine":"ADPogram 0.0.1"}}]}}}