Logo
Retour à la veille

CVE-2026-105033

Publié : 15 octobre 2026
Modifié : 15 octobre 2026
Lien officiel NVD
Score CVSS
8.8
HIGH

Description détaillée

The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Références et Patchs

https://github.com/xn0tsa/your-secrets-are-safe-with-mehttps://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111110111111111111000000000000000000000000000000000000000000000000000001101/https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab

Dernières Vulnérabilités

CVE-2026-92777

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.

VOIR DÉTAILS

CVE-2026-92629

A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.

VOIR DÉTAILS

CVE-2026-89062

A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.

VOIR DÉTAILS