CVE-2026-4584: Shenzhen HCC Technology MPOS M6 PLUS Cardholder Data cleartext transmission
A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. This affects an unknown part of the component Cardholder Data Handler. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack requires access to the local network. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4584?
CVE-2026-4584 is considered to have a high severity due to the potential exposure of sensitive cardholder data.
How do I fix CVE-2026-4584?
To fix CVE-2026-4584, it is recommended to update the Shenzhen HCC Technology MPOS M6 PLUS to the latest version that addresses this vulnerability.
What kind of data is affected by CVE-2026-4584?
CVE-2026-4584 affects the transmission of cardholder data in cleartext, which exposes sensitive information.
Which product versions are vulnerable to CVE-2026-4584?
CVE-2026-4584 specifically affects the Shenzhen HCC Technology MPOS M6 PLUS version 1V.31-N.
What is the impact of exploiting CVE-2026-4584?
Exploiting CVE-2026-4584 can lead to unauthorized access to sensitive cardholder information due to cleartext transmission.