← Vulnerability feed

Vulnerability record · CVE-2026-32965 · published 20 April 2026

CVE-2026-32965: Silextechnology sd-330ac firmware insecure default initialization vulnerability

SSilextechnology · Sd 330ac Firmware

Initialization of a resource with an insecure default vulnerability exists in SD-330AC and AMC Manager provided by silex technology, Inc. When the affected device is connected to the network with the initial (factory-default) configuration, the device can be configured with the null string password.

8.7 CVSS 4.0 High EPSS 0.47% · top 62.2% CWE-1188 · Insecure default initialization
8.7CVSS 4.0 base score
0.47%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
3References
17 Jun 2026Last modified by NVD

Description

Initialization of a resource with an insecure default vulnerability exists in SD-330AC and AMC Manager provided by silex technology, Inc. When the affected device is connected to the network with the initial (factory-default) configuration, the device can be configured with the null string password.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://jvn.jp/en/vu/JVNVU94271449/ Third Party Advisory
https://www.silex.jp/support/security-advisories/2026-001 Vendor Advisory
https://www.silex.jp/support/security-advisories/en/2026-001 Vendor Advisory

Track CVE-2026-32965 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2026-32956Silextechnology sd-330ac firmware heap-based buffer overflow vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in processing the redirect URLs. Arbit…EPSS 0.71%8.7CVE-2026-32955Silextechnology sd-330ac firmware stack-based buffer overflow vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain a stack-based buffer overflow vulnerability in processing the redirect URLs. Arbi…EPSS 0.65%8.2CVE-2026-32959Silextechnology sd-330ac firmware broken cryptographic algorithm vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a use of a broken or risky cryptographic algorithm. Information in …EPSS 0.27%7.1CVE-2026-32960Silextechnology sd-330ac firmware vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a sensitive information in resource not removed before reuse. An at…EPSS 0.46%6.9CVE-2026-32964Silextechnology sd-330ac firmware vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Pr…EPSS 0.47%6.9CVE-2026-32961Silextechnology sd-330ac firmware heap-based buffer overflow vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in packet data processing of sx_smpd. …EPSS 0.60%6.9CVE-2026-32962Silextechnology sd-330ac firmware missing authentication for critical function vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration ma…EPSS 0.47%6.9CVE-2026-32958Silextechnology sd-330ac firmware vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fak…EPSS 0.40%

Source: NIST National Vulnerability Database (record CVE-2026-32965), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.