9.8
CVE-2026-31928
- EPSS 0.42%
- Veröffentlicht 26.06.2026 22:52:51
- Zuletzt bearbeitet 06.07.2026 17:58:09
- CVE-Watchlists
- Unerledigt
Daktronics Controller Firmware Use of Hard-coded Credentials
The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Daktronics ≫ Dmp-5000 Firmware Version < 8.117.0.0
Daktronics ≫ Dmp-5000 Firmware Version >= 9.0.0.0 < 9.43.0.0
Daktronics ≫ Dmp-5000 Firmware Version >= 10.0.0.0 < 10.34.0.0
Daktronics ≫ Dmp-8000 Firmware Version < 8.117.0.0
Daktronics ≫ Dmp-8000 Firmware Version >= 9.0.0.0 < 9.43.0.0
Daktronics ≫ Dmp-8000 Firmware Version >= 10.0.0.0 < 10.34.0.0
Daktronics ≫ Vfc-dmp-5000 Firmware Version < 8.117.0.0
Daktronics ≫ Vfc-dmp-5000 Firmware Version >= 9.0.0.0 < 9.43.0.0
Daktronics ≫ Vfc-dmp-5000 Firmware Version >= 10.0.0.0 < 10.34.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.42% | 0.34 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| DHS.gov | 9.3 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| DHS.gov | 8.1 | 2.8 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
|
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-04
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-176-04.json