Duox Plus Monitor Firmware (Veo Wi Fi Range)
Approved changes feed: RSS · Atom
cpe:2.3:a:fermax_electronica_s.a.u.:duox_plus_monitor_firmware_(veo_wi-fi_range):*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Fermax Electronica S.A.U. (ecc473ee-651a-52e1-a5eb-e4e4bdb5d417) |
|---|---|
| Product | Duox Plus Monitor Firmware (Veo Wi Fi Range) (3d3a5d1c-cc84-5c1d-b412-00363842aeaa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-85628 |
vulnerable | 2026-10-13 12:28:53.976415 |
Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability
Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.
Published: 2026-09-16T09:36:34.635Z
Updated: 2026-09-16T18:09:27.675Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86474 |
vulnerable | 2026-10-13 12:28:46.566964 |
Improper Certificate Validation in the Firmware Download vulnerability
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.
Published: 2026-09-16T10:02:09.244Z
Updated: 2026-09-16T13:25:32.339Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86585 |
vulnerable | 2026-10-13 12:28:46.388399 |
Improper Verification of the Firmware Signature vulnerability
The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware.
Published: 2026-09-16T10:13:22.416Z
Updated: 2026-09-16T17:47:00.863Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.