GCVE - cpe:2.3:a:toptech_systems:rcu

Approved changes feed: RSS · Atom

cpe:2.3:a:toptech_systems:rcu_ii+:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Toptech Systems (`693f0e98-1d4c-58ea-9f7e-03eeb9f96a03`)
Product	Rcu Ii+ (`2ae6b816-aaf6-504e-b096-01ec977cab9c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-12562`	vulnerable	2026-09-16 04:32:51.424731	Toptech Systems RCU II+ and Multiload II+ Missing Authentication for Critical Function HIGH (8.8) The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system. This vulnerability stems from a network-accessible port running a Target Communications Framework (TCF) service that does not require any authentication, allowing an attacker to directly interact with the Linux environment that powers the device. Once connected, an attacker can freely view and modify the filesystem, manipulate running processes, and control network interfaces, enabling deep alteration of system behavior. Published: 2026-07-30T21:29:35.378Z Updated: 2026-07-31T15:39:49.359Z Open on db.gcve.eu Reference links https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/ https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.