Vulnerability Description
The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-17
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-04
FAQ
What is CVE-2026-31928?
CVE-2026-31928 is a vulnerability with a CVSS score of 8.1 (HIGH). The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using thes...
How severe is CVE-2026-31928?
CVE-2026-31928 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-31928?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.