Description
The Ebyte device does not adequately verify the origin or authenticity of
requests submitted to the web management interface. An unauthenticated
remote attacker could persuade an authenticated administrator to visit a
crafted page, causing unauthorized configuration changes or a
disruption of device availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ebyte | Ebyte NA111-M Firmware | 9013-2-17 | — |
Advisories 2
- ICSA-26-239-05 Ebyte NA111-M CISA ICS & IT advisories · Aug 27, 2026
- ICSA-26-237-06 Ebyte NE2-D11 CISA ICS & IT advisories · Aug 25, 2026