TI-2022-04572 CVE-2022-4985 · GHSA-5fh6-8xc5-75vwVodafone H500s WiFi Password Disclosure via activation.jsonPriority HIGH 77Vodafone H500s devices running firmware v3.5.10 (hardware model Sercomm VFH500) expose the WiFi access point password via an unauthenticated HTTP endpoint.CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00493 · Published 2025-11-14 · No fix listed CWE-497