CVE-2026-67596

Deferred Deferred - Pending Action

Weak Encryption in CSL 1010 M2M 3G WiFi Module Firmware

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: VulnCheck

Description

CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher with a static key applied to the configuration backup file. Attackers can trivially decrypt the Router.cfg backup file to expose web administration and telnet passwords, WPA/WPA2 pre-shared keys, PPPoE and 3G/APN credentials, and SIM identifiers including IMSI and IMEI.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-07-30

Generated

2026-07-31

AI Q&A

2026-07-31

EPSS Evaluated

N/A

NVD

CVE-2026-67596

EUVD

EUVD-2026-51157

Affected Vendors & Products

Vendor	Product	Version / Range
csl	1010_m2m_3g_wifi_module	2.2.1.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-261	Obscuring a password with a trivial encoding does not protect the password.

Attack-Flow Graph

Executive Summary

The CSL 1010 M2M 3G WiFi Module firmware through version 2.2.1.4 has a weak encryption flaw. It uses a single-byte XOR cipher with a static key to encrypt configuration backup files. Attackers can reverse this encryption to recover stored secrets in plaintext from the Router.cfg backup file.

Detection Guidance

Detecting this vulnerability requires checking for the CSL 1010 M2M 3G WiFi Module firmware version 2.2.1.4 or earlier. Inspect the Router.cfg backup file for weak encryption by analyzing if a single-byte XOR cipher with a static key was applied. Use file analysis tools to reverse the cipher and check for plaintext credentials.

Impact Analysis

Unauthenticated attackers can decrypt sensitive credentials like web admin passwords, WiFi keys, PPPoE details, 3G/APN settings, and SIM identifiers (IMSI, IMEI). This could lead to unauthorized network access, data breaches, or device compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Exposure of credentials and SIM identifiers may result in non-compliance with data protection and privacy regulations.

Mitigation Strategies

Immediately update the CSL 1010 M2M 3G WiFi Module firmware to the latest version beyond 2.2.1.4. Disable remote access to the module if not required. Change all exposed credentials including web administration, telnet, WPA/WPA2, PPPoE, 3G/APN, and SIM identifiers. Restrict physical and network access to the device.

Hi! I’m here to help you understand CVE-2026-67596. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70