CVE-2026-77847

Received Received - Intake

Hard-Coded Credentials in Tycon Systems TPDIN-Monitor-WEB3

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: ICS-CERT

Description

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability. This could allow an attacker to intercept sensitive information or credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-04

Last Modified

2026-09-04

Generated

2026-09-05

AI Q&A

2026-09-05

EPSS Evaluated

N/A

NVD

CVE-2026-77847

Affected Vendors & Products

Vendor	Product	Version / Range
tycon_systems	tpdin_monitor_web3	to 2.2.9 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior contain hard-coded credentials. This flaw allows attackers to intercept sensitive information or credentials transmitted through the system.

Detection Guidance

Detection of hard-coded credentials in Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior requires checking for default or embedded credentials in the application or network traffic. Inspect configuration files, firmware, or web interfaces for hard-coded usernames and passwords. Monitor network traffic for unencrypted transmission of credentials.

Impact Analysis

An attacker could exploit this to gain unauthorized access to sensitive data or credentials, potentially leading to data breaches or further network compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality.

Mitigation Strategies

Update Tycon Systems TPDIN-Monitor-WEB3 to a version later than 2.2.9 to remove hard-coded credentials. If an update is not available, isolate the affected system from the network and restrict access to sensitive information.

Hi! I’m here to help you understand CVE-2026-77847. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70