Skip to content
OpenAdvisories

Vendor

Fermax Electronica S.A.U.

4 known vulnerabilities.

Fermax Electronica S.A.U. at a glance

Last 12 months
4
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 4 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202640
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

DUOX PLUS monitor firmware (VEO Wi-Fi range) 3 DuoxMe 2
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.7
    CVE-2026-86585

    Improper Verification of the Firmware Signature vulnerability

    The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware.

    Fermax Electronica S.A.U. DUOX PLUS monitor firmware (VEO Wi-Fi range)
  • High 7.7
    CVE-2026-86474

    Improper Certificate Validation in the Firmware Download vulnerability

    The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.

    Fermax Electronica S.A.U. DUOX PLUS monitor firmware (VEO Wi-Fi range)
  • High 7.0
    CVE-2026-85628

    Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability

    Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker …

    Fermax Electronica S.A.U. DUOX PLUS monitor firmware (VEO Wi-Fi range) DuoxMe
  • Medium 6.9
    CVE-2026-86443

    Cleartext Storage of Sensitive Information Vulnerability

    Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account.

    Fermax Electronica S.A.U. DuoxMe