CVE-2026-39460

Summary

The vulnerability allows attackers to extract plaintext usernames and passwords from configuration files, including default factory credentials, through TFTP transfers initiated via SNMP without authentication. This creates a high-impact exposure where credentials can be easily harvested by anyone with network access.

Exploitability

Exploitation is relatively easy requiring only network access to initiate SNMP-based TFTP transfers, with no authentication required for the TFTP transfer initiation, allowing attackers to extract configuration files containing plaintext credentials.

Blast radius

The impact could be significant across multiple devices that store credentials in plaintext and allow unauthenticated TFTP transfers, potentially exposing default factory credentials and administrative accounts across an entire network segment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable SNMP-based TFTP transfer functionality or restrict access to the affected configuration interface to authenticated users only, as no specific fixed version is mentioned in the description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.