Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-97858

Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Guangzhou Juan IoT Technology Co., Ltd. EseeCloud App

Default version status: unaffected

  • 0 to ≤ 4.9.6affected

Guangzhou Juan IoT Technology Co., Ltd. EseeCloud Firmware

Default version status: unaffected

  • 0 to ≤ 4.9.86.0affected

References