cbcvebase.

Welotec Eg400Mk2-D11001-000101 vulnerabilities

1 known vulnerability affecting welotec/eg400mk2-d11001-000101.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-41702P2CRITICALCVSS 9.8≥ 0.0.0, < v1.7.7≥ v1.8.0, < v1.8.22025-08-26
CVE-2025-41702 [CRITICAL] CWE-321 CVE-2025-41702: The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An un The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.
nvd
Welotec Eg400Mk2-D11001-000101 vulnerabilities | cvebase