CVE-2026-2702: Beetel 777VR1 WPA2 PSK hard-coded credentials
A security flaw has been discovered in Beetel 777VR1 up to 01.00.09. This issue affects some unknown processing of the component WPA2 PSK. Performing a manipulation results in hard-coded credentials. The attacker must have access to the local network to execute the attack. The complexity of an attack is rather high. The exploitability is assessed as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2702?
CVE-2026-2702 is considered a high severity vulnerability due to the potential for unauthorized access through hard-coded credentials.
How do I fix CVE-2026-2702?
To fix CVE-2026-2702, update the Beetel 777VR1 firmware to a version beyond 01.00.09 where the hard-coded credentials issue is resolved.
Who is affected by CVE-2026-2702?
CVE-2026-2702 affects users of the Beetel 777VR1 router running firmware up to version 01.00.09.
What is the nature of the vulnerability in CVE-2026-2702?
CVE-2026-2702 is a security flaw that involves hard-coded WPA2 PSK credentials allowing attackers with local network access to exploit the device.
Can CVE-2026-2702 be exploited remotely?
No, CVE-2026-2702 can only be exploited by an attacker with access to the local network.