Description
A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 4.6.2.0 is sufficient to fix this issue. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-09-27
Score: 10 Critical
EPSS: 1.1% Low
KEV: No
Impact: Unauthorized access leading to potential remote exploitation
Action: Assess Impact
AI Analysis

Impact

An unknown function in the Debug Service of Seetong T8108, T8108P, T8116, and T8232 devices can be manipulated to bypass authentication. The flaw is remotely exploitable and public exploit code is available. Attackers who gain unaenticated access can potentially control the device or elevate privileges, though the CVE does not explicitly detail post‑authentication capabilities. Updating to firmware 4.6.2.0 removes the vulnerability; vendors recommended this upgrade.

Affected Systems

Vendors: Seetong. Products: T8108, T8108P, T8116 and T8232, all running firmware version 4.6.1.4‑build202604241011. These models are identified by the corresponding CPE entries provided by the vulnerability report.

Risk and Exploitability

The CVSS score of 10 indicates the highest possible severity, reflecting the full compromise potential when authentication is bypassed. The EPSS score of 0.00767, equivalent to less than 1%, indicates a very low but nonzero probability of exploitation. The CVE states that the attack may be launched remotely and that exploit code is publicly available, meaning remote attackers can potentially exploit the vulnerability if they can reach the Debug Service port. The vulnerability is not listed in CISA’s KEV catalog, but the high score and remote nature of the flaw warrant heightened vigilance.

Generated by OpenCVE AI on October 23, 2026 at 19:47 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Restrict inbound traffic to the device’s Debug Service port using a firewall or network segmentation to limit reachability to trusted hosts.
  • Disable or uninstall the Debug Service entirely if it is not required for operational purposes, removing the vulnerable entry point.
  • Apply any available firmware update that includes a fix for improper authentication; if none exists, contact Seetong for a remediation timeline and consider continued monitoring for vendor responses.
  • Enable detailed audit logging on the affected devices and review logs for suspicious authentication attempts, ensuring rapid detection of potential exploitation attempts.

Generated by OpenCVE AI on October 23, 2026 at 19:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 15:00:00 +0000

Type Values Removed Values Added
Description A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 4.6.2.0 is sufficient to fix this issue. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way.
References
Metrics cvssV2_0

{'score': 10, 'vector': 'AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:W/RC:UR'}

cvssV3_0

{'score': 10, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:W/RC:R'}

cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:W/RC:R'}

 cvssV2_0

{'score': 10, 'vector': 'AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 10, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C'}

Mon, 28 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sun, 27 Sep 2026 23:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication
First Time appeared Seetong
Seetong t8108
Seetong t8108p
Seetong t8116
Seetong t8232
Weaknesses CWE-287
CPEs cpe:2.3:a:seetong:t8108:*:*:*:*:*:*:*:*
cpe:2.3:a:seetong:t8108p:*:*:*:*:*:*:*:*
cpe:2.3:a:seetong:t8116:*:*:*:*:*:*:*:*
cpe:2.3:a:seetong:t8232:*:*:*:*:*:*:*:*
Vendors & Products Seetong
Seetong t8108
Seetong t8108p
Seetong t8116
Seetong t8232
References
Metrics cvssV2_0

{'score': 10, 'vector': 'AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:W/RC:UR'}

cvssV3_0

{'score': 10, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:W/RC:R'}

cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:W/RC:R'}

cvssV4_0

{'score': 10, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Seetong T8108 T8108p T8116 T8232
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-23T14:43:10.196Z

Reserved: 2026-09-27T07:30:32.503Z

Link: CVE-2026-100886

cve-icon Vulnrichment

Updated: 2026-09-28T13:14:04.302Z

cve-icon NVD

Status : Deferred

Published: 2026-09-27T23:16:59.020

Modified: 2026-10-23T15:17:22.593

Link: CVE-2026-100886

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T20:00:16Z

Weaknesses