THREATIST.IORead the docs 5 records
Multiple binary application files on the CMS8000 device are compiled with 'not stripped' and 'debug_info' compilation settings.
The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point.
Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileged access to any device.
The CMS800 device fails while attempting to parse malformed network data sent by a threat actor.
A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware update, resulting in permanent changes to device functionality.