Vulnerability in Lenze C430
CVE-2026-14837
Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorized administrative access and complete system compromise.
EPSS: 0.001 (0.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Lenze C430 — versions 1.0.0
- Lenze C520 — versions 1.0.0
- Lenze C550 — versions 1.0.0
- Lenze I950 Gena — versions 1.0.0
- Lenze I950 Genb — versions 2.0.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-14837?
- CVE-2026-14837 is a high-severity vulnerability in Lenze C430, classified under Improper Verification of Cryptographic Signature. CVSS score: 7.8/10. Published 2026-07-27.
- How severe is CVE-2026-14837?
- High severity. CVSS v3 base score is 7.8 out of 10.