CVE-2026-1223CWE-522

BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Insufficiently Protected Credentials

Medium · published January 20, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
36.4
In the wild
Unconfirmed
What it is

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to allowing authenticated remote attackers to obtain SMTP plaintext passwords through the web frontend.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00432 · 36.4th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-01-20T06:35Z
EPSS history
Timeline
  • 20 JAN 06:35Z
    BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Insufficiently Protected Credentials
    cvelistv5