Description
Xiiaozet LK100W exposes a critical management function that can be
invoked without authentication, allowing a remote attacker to enable
administrative services that should be restricted. Successful
exploitation may permit unauthorized access to the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Xiiaozet | Xiiaozet LK100W | < 2.1.240 | 2.1.240 |
Advisories 1
- ICSA-26-239-01 Xiiaozet LK100W CISA ICS & IT advisories · Aug 27, 2026