MEDIUM 6.8 NVD
CVE-2026-33272
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01
- https://www.hms-networks.com/
- https://www.hms-networks.com/cybersecurity
This medium severity vulnerability with a CVSS score of 6.8 was published on 2026-10-09 via NVD.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.