CVE-2026-32959
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with the use of a broken or risky cryptographic algorithm. Information in the traffic may be retrieved via a man-in-the-middle attack.
Risk Assessment
Weak cryptography allows a man-in-the-middle attacker to intercept or read traffic data. This may lead to disclosure of confidential information.
Recommendation
Update SD-330AC and AMC Manager to versions containing cryptographic fixes. Until updated, consider limiting network exposure and applying additional channel protections.
Other vulnerabilities in SD-330AC and AMC Manager
See all- CVE-2026-32964Medium
SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.
- CVE-2026-32962Medium
SD-330AC devices and AMC Manager provided by silex technology contain a missing authentication for critical function issue. The device configuration may be altered without authentication.
- CVE-2026-32957Medium
SD-330AC devices and AMC Manager provided by silex technology contain a missing authentication for critical function issue on firmware maintenance. Arbitrary files may be uploaded to the device without authentication.
Original NVD description (English source)
SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a use of a broken or risky cryptographic algorithm. Information in the traffic may be retrieved via man-in-the-middle attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS