CVE-2026-105033: EnergizeLab AI Station Default Root Credentials with SSH Enabled
Published Oct 15, 2026
·Updated
The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.
Affected Software
1 affected component
EnergizeLab AI Station (RK3562)
Event History
Oct 15, 2026
CVE Published
via MITRE·08:42 PM
Data Sourced
via MITRE·08:42 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are exposed?
EnergizeLab AI Station devices using the RK3562 firmware image are exposed if they are reachable over the network, because SSH is enabled and the image ships with default root credentials.
2
What does an attacker need to exploit this issue?
An attacker needs network access to the device. No prior authentication or user interaction is required, and successful SSH login provides root-level control.