CVE-2026-4583: Shenzhen HCC Technology MPOS M6 PLUS Bluetooth authentication replay
A vulnerability was detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this issue is some unknown functionality of the component Bluetooth Handler. Performing a manipulation results in authentication bypass by capture-replay. The attack must originate from the local network. The attack is considered to have high complexity. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4583?
CVE-2026-4583 has a medium severity due to the potential for authentication bypass in Bluetooth communication.
How do I fix CVE-2026-4583?
To remediate CVE-2026-4583, it is recommended to update the Shenzhen HCC Technology MPOS M6 PLUS to the latest firmware version that addresses this vulnerability.
What products are affected by CVE-2026-4583?
CVE-2026-4583 specifically affects the Shenzhen HCC Technology MPOS M6 PLUS model running version 1V.31-N.
What type of attack does CVE-2026-4583 enable?
CVE-2026-4583 enables attackers to perform Bluetooth authentication replay attacks, allowing them to bypass authentication.
Are there any specific mitigation strategies for CVE-2026-4583?
Mitigation strategies for CVE-2026-4583 include monitoring Bluetooth communications for anomalies and ensuring updated security protocols are in place.