CVE-2026-47097

Summary

The AJA HELO Plus firmware contains a static AES passphrase that can be reverse-engineered from the firmware image, allowing attackers to decrypt sensitive diagnostics bundles without authentication. This exposes highly sensitive server information through an unauthenticated diagnostics endpoint.

Exploitability

Exploitation requires reverse-engineering the firmware image to recover the static passphrase, which is moderately difficult but feasible for determined attackers with access to the firmware binary.

Blast radius

If exploited, this vulnerability could expose sensitive server configuration details, network settings, and diagnostic information across all affected devices running firmware versions before 2.1.7.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version 2.1.7 or later to remediate the static passphrase vulnerability in the diagnostics export functionality.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.