CVE-2026-82487: Weak Password Recovery in Beetel 450TC3

This vulnerability affects the Beetel 450TC3 device running firmware version 01.00.00_01. An attacker can remotely exploit a weakness in the password recovery process, potentially allowing unauthorized access or manipulation related to password recovery. The vulnerability does not require user interaction and has a CVSS 4.0 base score of 5.3, indicating medium severity. The vendor was notified but has not issued any response or patch, and no known exploits are currently observed in the wild.

The impact of this vulnerability is the potential compromise of the password recovery mechanism, which could allow an attacker to reset or recover passwords in an unauthorized manner remotely. This could lead to unauthorized access to the device or its management interface. However, the CVSS vector indicates limited confidentiality, integrity, and availability impacts, and no privilege escalation or user interaction is required.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded or provided guidance, users should monitor for any future advisories or updates from Beetel. Until a fix is released, consider restricting remote access to the device's management interfaces to trusted networks only to reduce exposure.