Ubee Evw3226
Approved changes feed: RSS · Atom
cpe:2.3:a:ubee_interactive:ubee_evw3226:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ubee Interactive (05f384d1-f524-5cbe-b0f2-96b3b3f363b4) |
|---|---|
| Product | Ubee Evw3226 (8d5f6763-5f96-5d98-8b35-0307eb955ae4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-15056 |
vulnerable | 2026-06-08 05:07:26.270953 |
Ubee EVW3226 Unauthenticated Backup File Disclosure
Ubee EVW3226 cable modem/routers firmware versions up to and including 1.0.20 store configuration backup files in the web root after they are generated for download. These backup files remain accessible without authentication until the next reboot. A remote attacker on the local network can request 'Configuration_file.cfg' directly to obtain the backup archive. Because backup files are not encrypted, they expose sensitive information including the plaintext admin password, allowing full compromise of the device.
Published: 2025-11-14T22:49:58.179Z
Updated: 2026-04-07T14:03:34.146Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.