{"id":"CVE-2026-29797","published":"2026-10-09T15:17:13.843","lastModified":"2026-10-11T17:17:04.457","description":"No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP.","cvssScore":7.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","cwes":["CWE-494"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json","tags":[]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01","tags":[]},{"url":"https://www.hms-networks.com/","tags":[]},{"url":"https://www.hms-networks.com/cybersecurity","tags":[]}],"exploitRefs":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json","tags":[]}],"hasPoc":true,"ai":null}