CVE-2026-82487: Weak Password Recovery in Beetel 450TC3

This vulnerability affects Beetel 450TC3 version 01.00.00_01 and relates to a weak password recovery process. An attacker with low privileges can remotely manipulate the system to recover passwords due to insufficient security controls in the recovery mechanism. The vulnerability is classified under CWE-640 (Weak Password Recovery Mechanism). The CVSS 3.1 base score is 5.3, indicating medium severity, with network attack vector, low complexity, no privileges required, and no user interaction needed. The vendor was contacted but did not provide any response or remediation.

An attacker can remotely exploit this vulnerability to recover passwords through the weak password recovery process, potentially gaining unauthorized access or information. The impact is limited by the requirement of low privileges but does not require user interaction. No known active exploitation in the wild has been reported.

No official patch or remediation is currently available, and the vendor has not responded to the disclosure. Users should monitor for any future vendor advisories or updates. Until a fix is provided, consider restricting remote access to the affected device and employing network-level controls to limit exposure.