CVE-2026-105033

Received Received - Intake

Default Root Credentials and SSH Access in EnergizeLab AI Station Firmware

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: Austin Hackers Anonymous

Description

The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-15

Last Modified

2026-10-15

Generated

2026-10-16

AI Q&A

2026-10-16

EPSS Evaluated

N/A

NVD

CVE-2026-105033

Affected Vendors & Products

Vendor	Product	Version / Range
EnergizeLab	AI	Station firmware (RK3562) n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability involves the EnergizeLab AI Station (RK3562) firmware image having default root credentials and SSH enabled by default. An attacker with network access can exploit this to log in as root and gain full control of the device.

Detection Guidance

Check for SSH access on the device's IP address using nmap: nmap -p 22 <device_ip>. If SSH is open, attempt to log in with username 'root' and no password. If successful, the device is vulnerable.

Impact Analysis

An attacker could take complete control of the device, leading to unauthorized access, data theft, or disruption of services. This could affect confidentiality, integrity, and availability of the system.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA due to unauthorized access to sensitive data, potential data breaches, and lack of proper access controls. It may violate requirements for data protection and security controls.

Mitigation Strategies

Disable SSH access or change the default root password immediately. Isolate the device from untrusted networks. Update the firmware if a patch is available from the vendor.

Hi! I’m here to help you understand CVE-2026-105033. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70