8.5
CVE-2026-14837
- EPSS 0.08%
- Veröffentlicht 27.07.2026 07:03:27
- Zuletzt bearbeitet 30.07.2026 14:31:21
- CVE-Watchlists
- Unerledigt
SSH Enablement Signature Verification Bypass
Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorized administrative access and complete system compromise.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLenze
≫
Produkt
c430
Default Statusunaffected
Version
1.0.0
Version <
1.15.2
Status
affected
HerstellerLenze
≫
Produkt
c520
Default Statusunaffected
Version
1.0.0
Version <
1.15.2
Status
affected
HerstellerLenze
≫
Produkt
c550
Default Statusunaffected
Version
1.0.0
Version <
1.15.2
Status
affected
HerstellerLenze
≫
Produkt
i950 GenA
Default Statusunaffected
Version
1.0.0
Version <
1.14.2
Status
affected
HerstellerLenze
≫
Produkt
i950 GenB
Default Statusunaffected
Version
2.0.0
Version <
2.0.3
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.003 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| info@cert.vde.com | 8.5 | 0 | 0 |
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| info@cert.vde.com | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-347 Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
https://www.certvde.com/en/advisories/VDE-2026-077/