CVE-2026-85628 — Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability

CVE-2026-85628

Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability PUBLISHED

Description (CNA)

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.

Affected (CNA)

Vendor / product	Versions
Fermax Electronica S.A.U. / DuoxMe	affected 0 before 4.3.4
Fermax Electronica S.A.U. / DUOX PLUS monitor firmware (VEO Wi-Fi range)	affected 0 before 01.50.001

CWE

CWE-319

References

https://fermax.com/security-advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.