Vulnerabilities

TI-2026-45269 CVE-2026-63587 · GHSA-j64q-jhwc-69jc

SMS Password Authorization Bypass via Failed Attempt Counter

MEDIUM 44

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00414 Published 2026-08-25 Fixed in 1.74 CWE-288

TI-2026-45268 CVE-2026-63586 · GHSA-cf4x-hgj3-m8g7

MEDIUM 50

The web-based management interface uses a modified uhttpd server with CGI shell scripts.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00926 Published 2026-08-25 Fixed in 1.57, 1.74 CWE-78

TI-2026-13755 CVE-2026-16462 · GHSA-c3rc-7w9v-j8rc

MEDIUM 49

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00754 Published 2026-07-28 No fix listed CWE-89