CVE-2026-4582

low

Description

A security vulnerability has been detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this vulnerability is an unknown functionality of the component Bluetooth. Such manipulation leads to missing authentication. The attack must be carried out from within the local network. Attacks of this nature are highly complex. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

References

https://vuldb.com/?submit.775433

https://vuldb.com/?id.352419

https://vuldb.com/?ctiid.352419

https://github.com/Davim09/m6plusexploit/blob/main/docs/CVE-1-Authentication.md

Details

Source: Mitre, NVD

Published: 2026-03-23

Updated: 2026-03-23

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:A/AC:H/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 5

Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Severity: Medium

CVSS v4

Base Score: 2.3

Vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Severity: Low

EPSS

EPSS: 0.00023