CVE-2026-50210

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The device encrypts data using AES-CBC (Advanced Encryption Standard in Cipher Block Chaining mode) with static zero-filled Initialization Vectors (IVs). This implementation allows for known-plaintext decryption and replay attacks, where an attacker captures and re-transmits valid data packets to deceive the system. The issue is exploitable over the network without requiring authentication.

Recommendations Replace the static zero-filled IVs with random IVs for every encryption operation.