CVE-2026-82929 : 상세 정보

CVE-2026-82929

2026-09-28
13h17 +00:00
A02-Cryptographic Failures
2026-09-28
16h31 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential interception. This issue was fixed in version 3.0.30

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-321 Use of Hard-coded Cryptographic Key
The product uses a hard-coded, unchangeable cryptographic key.

참고 자료