Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-85628

Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
FERMAX

Description

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fermax Electronica S.A.U. DuoxMe

Default version status: unaffected

  • 0 to < 4.3.4affected

Fermax Electronica S.A.U. DUOX PLUS monitor firmware (VEO Wi-Fi range)

Default version status: unaffected

  • 0 to < 01.50.001affected

References