CVE-2026-117082

{
  "etk_id": "ETK-2026-3312",
  "cve_id": "CVE-2026-117082",
  "display_id": "CVE-2026-117082",
  "ghsa_id": "GHSA-m5fr-9mf3-m8g7",
  "euvd_id": "EUVD-2026-115612",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authentication bypass in AOT-4221SR UPnP service",
  "summary": "Sercomm AOT-4221SR 4.6 GPON ONU devices are affected by an authentication bypass in their UPnP service. An attacker able to reach the service on port 5555 may perform SOAP administrative actions without logging in, including changing network or firewall settings.",
  "mitigation": "Disable UPnP if it is not required, and restrict access to port 5555 to trusted management networks. Do not expose the device management service to untrusted networks.",
  "vendor": "Sercomm",
  "product": "Sercomm AOT-4221SR",
  "affected": [
    {
      "affected_notes": [
        "n/a"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "n/a",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 14.294640283333333,
  "t0_at": "2026-11-02T00:00:00+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-02T00:00:00+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-02T00:00:00+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-117082"
    }
  }
}