PT-2026-115220

CVE-2026-105033

·

Published

2026-10-15

·

Updated

2026-10-15

Description by

CVSS 3.1
8.8
High
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-798: Use of Hard-coded Credentials
Related identifiers
CVE-2026-105033
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com