CVE-2026-32962
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
SD-330AC devices and AMC Manager provided by silex technology contain a missing authentication for critical function issue. The device configuration may be altered without authentication.
Risk Assessment
An unauthenticated attacker could modify the device configuration, potentially leading to device takeover or disruption of operation.
Recommendation
Restrict network access to the device management interface and apply the vendor-provided firmware update as soon as possible.
Other vulnerabilities in SD-330AC and AMC Manager
See all- CVE-2026-32964Medium
SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.
- CVE-2026-32959Medium
SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with the use of a broken or risky cryptographic algorithm. Information in the traffic may be retrieved via a man-in-the-middle attack.
- CVE-2026-32957Medium
SD-330AC devices and AMC Manager provided by silex technology contain a missing authentication for critical function issue on firmware maintenance. Arbitrary files may be uploaded to the device without authentication.
Original NVD description (English source)
SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration may be altered without authentication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS