CVE-2026-1221
Unknown Unknown - Not Provided

Use of Hardcoded Credentials in PrismX MX100 AP Controller Allows Remote Access

Publication date: 2026-01-20

Last updated on: 2026-01-20

Assigner: TWCERT/CC

Description
PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-01-20
Last Modified
2026-01-20
Generated
2026-07-06
AI Q&A
2026-01-20
EPSS Evaluated
2026-07-05
NVD
CVE-2026-1221
EUVD
EUVD-2026-3461

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
browan_communications prismx_mx100_ap_controller to 1.03.23.01 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-1221 is a critical vulnerability in the PrismX MX100 AP controller where hard-coded database credentials are embedded in the device's firmware. This allows unauthenticated remote attackers to log into the device's database without needing any authentication, exploiting these fixed credentials. [1, 2]

Impact Analysis

This vulnerability can have a severe impact as it allows attackers to remotely access the database without authentication, potentially leading to full compromise of the device's confidentiality, integrity, and availability. Attackers could steal sensitive data, modify or delete information, or disrupt device operations. [1, 2]

Mitigation Strategies

The immediate step to mitigate this vulnerability is to update the PrismX MX100 AP controller firmware to version 1.03.23.01 or later. [1, 2]

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-1221. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart