{"id":"CVE-2026-80276","published":"2026-10-01T06:17:10.430","lastModified":"2026-10-05T11:17:00.700","description":"Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read in cleartext by a remote, unauthenticated attacker.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://accesscontrol.fail/comelit-1456b/","tags":[]},{"url":"https://pro.comelitgroup.com/en-us/product/1456B","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Comelit Multi-User Gateway exposes an unauthenticated management interface that allows remote attackers to read sensitive configuration data including the Remote Configuration Password in cleartext. This authentication bypass flaw enables unauthorized access to device configuration without any credentials.","exploitability":"Exploitation is straightforward requiring only network access to the affected device, with no prerequisites beyond basic connectivity since the interface requires no authentication.","blast_radius":"The impact could be significant as attackers could gain access to sensitive configuration data and potentially use the Remote Configuration Password to further compromise the system or gain administrative control over the VIP System gateway.","remediation":"Disable the unauthenticated management interface or restrict network access to port 80 to trusted sources until a firmware update is available, as no fixed version has been published in the description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","ics","configuration"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:06:29.772Z"}}