CVE-2026-77977: CWE-306 in Ebyte Ebyte NA111-M Firmware
Description
The Ebyte NA111-M firmware version 9013-2-17 contains a vulnerability where its vendor configuration utility does not require authentication for certain administrative actions if default credentials remain unchanged. This allows an unauthenticated attacker on the adjacent network to reboot the device or restore factory settings, resulting in loss of configuration and service availability.
CVSS v3.1
Score 8.1high
Affected software
Ebyte
Ebyte NA111-M Firmware
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-77977 is a vulnerability in the Ebyte NA111-M firmware (version =9013-2-17) where the vendor configuration utility fails to enforce authentication for some administrative functions when default credentials are still set. An attacker on the adjacent network can exploit this to reboot the device or reset it to factory defaults, causing disruption of service and loss of configuration data. The vulnerability is classified as CWE-306 (Missing Authentication for Critical Function).
Potential Impact
Exploitation of this vulnerability allows an unauthenticated attacker with network adjacency to cause denial of service by rebooting the device or restoring factory settings. This leads to loss of configuration and interruption of device availability. There is no confidentiality impact, but integrity and availability impacts are high.
Mitigation Recommendations
No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, it is recommended to change default credentials to strong, unique passwords to prevent unauthorized access to administrative functions.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- icscert
- Date Reserved
- 2026-08-21T19:56:57.899Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a916b3dacd9273b49cabe62
Added to database: 08/28/2026, 11:04:29 UTC
Last enriched: 10/12/2026, 21:31:19 UTC
Last updated: 10/13/2026, 18:48:23 UTC
Views: 76
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.