Description
A cleartext transmission of sensitive information vulnerability exists
in certain Ebyte gateway products. The web management interface does not
adequately protect sensitive communications using transport-layer
encryption. An attacker with access to network traffic could intercept
authentication or session-related information transmitted between a user
and the affected device. Successful exploitation could result in
disclosure of sensitive information and unauthorized access to device
management functionality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ebyte | Ebyte NA111-M Firmware | 9013-2-17 | — |
Advisories 2
- ICSA-26-239-05 Ebyte NA111-M CISA ICS & IT advisories · Aug 27, 2026
- ICSA-26-237-06 Ebyte NE2-D11 CISA ICS & IT advisories · Aug 25, 2026