CVE-2026-1223 — BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Insufficiently Protected Credentials

CVE-2026-1223

BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Insufficiently Protected Credentials PUBLISHED

Description (CNA)

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to allowing authenticated remote attackers to obtain SMTP plaintext passwords through the web frontend.

Affected (CNA)

Vendor / product	Versions
BROWAN COMMUNICATIONS / PrismX MX100 AP controller	affected 0 before 1.03.23.01

CWE

CWE-522

References

https://www.twcert.org.tw/tw/cp-132-10642-3b808-1.html
https://www.twcert.org.tw/en/cp-139-10643-2f8d7-2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.