Threat database

A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GET_STATUS of the component TCP Service. The manipulation of the argument wifi_info results in information disclosure. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-101054 is a medium severity vulnerability in Thinkware U3000 version 1.02.04. It involves improper access controls in the TCP Service component, specifically in the get_file function accessing /tmp/wpa_supplicant.conf. The vulnerability allows remote attackers to exploit the flaw without authentication or user interaction. Public exploit code is available, but no vendor response or patch has been provided.

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUT_FILE of the file /tmp/wpa_supplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.