9.8

CVE-2026-31928

Medienbericht

Daktronics Controller Firmware Use of Hard-coded Credentials

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
DaktronicsDmp-5000 Firmware Version < 8.117.0.0
   DaktronicsDmp-5000 Version-
DaktronicsDmp-5000 Firmware Version >= 9.0.0.0 < 9.43.0.0
   DaktronicsDmp-5000 Version-
DaktronicsDmp-5000 Firmware Version >= 10.0.0.0 < 10.34.0.0
   DaktronicsDmp-5000 Version-
DaktronicsDmp-8000 Firmware Version < 8.117.0.0
   DaktronicsDmp-8000 Version-
DaktronicsDmp-8000 Firmware Version >= 9.0.0.0 < 9.43.0.0
   DaktronicsDmp-8000 Version-
DaktronicsDmp-8000 Firmware Version >= 10.0.0.0 < 10.34.0.0
   DaktronicsDmp-8000 Version-
DaktronicsVfc-dmp-5000 Firmware Version < 8.117.0.0
   DaktronicsVfc-dmp-5000 Version-
DaktronicsVfc-dmp-5000 Firmware Version >= 9.0.0.0 < 9.43.0.0
   DaktronicsVfc-dmp-5000 Version-
DaktronicsVfc-dmp-5000 Firmware Version >= 10.0.0.0 < 10.34.0.0
   DaktronicsVfc-dmp-5000 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.34
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
DHS.gov 9.3 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
DHS.gov 8.1 2.8 5.2
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
06.07.2026 15:32
https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-04
Third Party Advisory
US Government Resource
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-176-04.json
Third Party Advisory