{"document":{"acknowledgments":[{"organization":"CERT@VDE","summary":"coordination","urls":["https://certvde.com"]}],"aggregate_severity":{"namespace":"https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale","text":"Critical"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en-GB","notes":[{"category":"summary","text":"A hard-coded JWT secret in the egOS WebGUI backend is readable to the default user, allowing attackers to forge valid tokens and access protected API endpoints.","title":"Summary"},{"category":"details","text":"Attackers can impersonate any user (including administrators), modify configuration, upload firmware, reboot the device, and access sensitive logs.","title":"Impact"},{"category":"details","text":"Temporarily disable the WebGUI or restrict network access to the WebGUI to trusted admin stations.","title":"Mitigation"},{"category":"details","text":"Update egOS to version v1.7.7 or v1.8.2.\n\n| Product | Fixed Firmware |\n|---|---|\n| EG400Mk2-D11001-000101 | egOS v1.7.7 |\n| EG400Mk2-D11001-000101 | egOS v1.8.2 |\n| EG400Mk2-D11101-000101 | egOS v1.7.7 |\n| EG400Mk2-D11101-000101 | egOS v1.8.2 |\n| EG500Mk2-A11001-000101 | egOS v1.7.7 |\n| EG500Mk2-A11001-000101 | egOS v1.8.2 |\n| EG500Mk2-A11001-000201 | egOS v1.7.7 |\n| EG500Mk2-A11001-000201 | egOS v1.8.2 |\n| EG500Mk2-A11101-000101 | egOS v1.7.7 |\n| EG500Mk2-A11101-000101 | egOS v1.8.2 |\n| EG500Mk2-A12011-000101 | egOS v1.7.7 |\n| EG500Mk2-A12011-000101 | egOS v1.8.2 |\n| EG500Mk2-A21101-000101 | egOS v1.7.7 |\n| EG500Mk2-A21101-000101 | egOS v1.8.2 |\n| EG500Mk2-B11001-000101 | egOS v1.7.7 |\n| EG500Mk2-B11001-000101 | egOS v1.8.2 |\n| EG500Mk2-B11101-000101 | egOS v1.7.7 |\n| EG500Mk2-B11101-000101 | egOS v1.8.2 |\n| EG500Mk2-C11001-000101 | egOS v1.7.7 |\n| EG500Mk2-C11001-000101 | egOS v1.8.2 |\n| EG500Mk2-C11101-000101 | egOS v1.7.7 |\n| EG500Mk2-C11101-000101 | egOS v1.8.2 |\n| EG503L | egOS v1.7.7 |\n| EG503L | egOS v1.8.2 |\n| EG503L-G | egOS v1.7.7 |\n| EG503L-G | egOS v1.8.2 |\n| EG503L_4GB | egOS v1.7.7 |\n| EG503L_4GB | egOS v1.8.2 |\n| EG503W | egOS v1.7.7 |\n| EG503W | egOS v1.8.2 |\n| EG503W_4GB | egOS v1.7.7 |\n| EG503W_4GB | egOS v1.8.2 |\n| EG602L | egOS v1.7.7 |\n| EG602L | egOS v1.8.2 |\n| EG602W | egOS v1.7.7 |\n| EG602W | egOS v1.8.2 |\n| EG603L Mk2 | egOS v1.7.7 |\n| EG603L Mk2 | egOS v1.8.2 |\n| EG603W Mk2 | egOS v1.7.7 |\n| EG603W Mk2 | egOS v1.8.2 |\n| EG802W | egOS v1.7.7 |\n| EG802W | egOS v1.8.2 |\n| EG802W_i7_512GB_DinRail | egOS v1.7.7 |\n| EG802W_i7_512GB_DinRail | egOS v1.8.2 |\n| EG802W_i7_512GB_w/o DinRail | egOS v1.7.7 |\n| EG802W_i7_512GB_w/o DinRail | egOS v1.8.2 |\n| EG804W | egOS v1.7.7 |\n| EG804W | egOS v1.8.2 |\n| EG804W Pro | egOS v1.7.7 |\n| EG804W Pro | egOS v1.8.2 |","title":"Remediation"}],"publisher":{"category":"vendor","contact_details":"psirt@welotec.com","name":"Welotec GmbH","namespace":"https://welotec.com"},"references":[{"category":"external","summary":"Welotec PSIRT","url":"https://welotec.com/de/pages/coordinated-vulnerability-disclosure-policy"},{"category":"external","summary":"CERT@VDE Security Advisories for Welotec","url":"https://certvde.com/de/advisories/vendor/welotec"},{"category":"self","summary":"VDE-2025-076: Welotec: Hard-coded JWT secret in egOS WebGUI - HTML","url":"https://certvde.com/en/advisories/VDE-2025-076"},{"category":"self","summary":"VDE-2025-076: Welotec: Hard-coded JWT secret in egOS WebGUI - CSAF","url":"https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-076.json"}],"title":"Welotec: Hard-coded JWT secret in egOS WebGUI","tracking":{"aliases":["VDE-2025-076"],"current_release_date":"2025-08-26T07:00:00.000Z","generator":{"date":"2025-08-25T14:54:30.890Z","engine":{"name":"Secvisogram","version":"2.5.33"}},"id":"VDE-2025-076","initial_release_date":"2025-08-26T07:00:00.000Z","revision_history":[{"date":"2025-08-26T07:00:00.000Z","number":"1.0.0","summary":"initial version"}],"status":"final","version":"1.0.0"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"EG400Mk2-D11001-000101","product":{"name":"EG400Mk2-D11001-000101","product_id":"p01","product_identification_helper":{"model_numbers":["WEG500100210"]}}},{"category":"product_name","name":"EG400Mk2-D11101-000101","product":{"name":"EG400Mk2-D11101-000101","product_id":"p02","product_identification_helper":{"model_numbers":["WEG500100580"]}}},{"category":"product_name","name":"EG503W","product":{"name":"EG503W","product_id":"p03","product_identification_helper":{"model_numbers":["WEG500100010"]}}},{"category":"product_name","name":"EG503L","product":{"name":"EG503L","product_id":"p04","product_identification_helper":{"model_numbers":["WEG500100020"]}}},{"category":"product_name","name":"EG503W_4GB","product":{"name":"EG503W_4GB","product_id":"p05","product_identification_helper":{"model_numbers":["WEG500100030"]}}},{"category":"product_name","name":"EG503L_4GB","product":{"name":"EG503L_4GB","product_id":"p06","product_identification_helper":{"model_numbers":["WEG500100040"]}}},{"category":"product_name","name":"EG503L-G","product":{"name":"EG503L-G","product_id":"p07","product_identification_helper":{"model_numbers":["WEG500100130"]}}},{"category":"product_name","name":"EG500Mk2-A11101-000101","product":{"name":"EG500Mk2-A11101-000101","product_id":"p08","product_identification_helper":{"model_numbers":["WEG500100160"]}}},{"category":"product_name","name":"EG500Mk2-A11001-000101","product":{"name":"EG500Mk2-A11001-000101","product_id":"p09","product_identification_helper":{"model_numbers":["WEG500100170"]}}},{"category":"product_name","name":"EG500Mk2-B11101-000101","product":{"name":"EG500Mk2-B11101-000101","product_id":"p10","product_identification_helper":{"model_numbers":["WEG500100180"]}}},{"category":"product_name","name":"EG500Mk2-B11001-000101","product":{"name":"EG500Mk2-B11001-000101","product_id":"p11","product_identification_helper":{"model_numbers":["WEG500100190"]}}},{"category":"product_name","name":"EG500Mk2-C11101-000101","product":{"name":"EG500Mk2-C11101-000101","product_id":"p12","product_identification_helper":{"model_numbers":["WEG500100260"]}}},{"category":"product_name","name":"EG500Mk2-C11001-000101","product":{"name":"EG500Mk2-C11001-000101","product_id":"p13","product_identification_helper":{"model_numbers":["WEG500100270"]}}},{"category":"product_name","name":"EG500Mk2-A12011-000101","product":{"name":"EG500Mk2-A12011-000101","product_id":"p14","product_identification_helper":{"model_numbers":["WEG500100280"]}}},{"category":"product_name","name":"EG500Mk2-A11001-000201","product":{"name":"EG500Mk2-A11001-000201","product_id":"p15","product_identification_helper":{"model_numbers":["WEG500100290"]}}},{"category":"product_name","name":"EG500Mk2-A21101-000101","product":{"name":"EG500Mk2-A21101-000101","product_id":"p16","product_identification_helper":{"model_numbers":["WEG500100650"]}}},{"category":"product_name","name":"EG602W","product":{"name":"EG602W","product_id":"p17","product_identification_helper":{"model_numbers":["WEG600100010"]}}},{"category":"product_name","name":"EG602L","product":{"name":"EG602L","product_id":"p18","product_identification_helper":{"model_numbers":["WEG600100020"]}}},{"category":"product_name","name":"EG603W Mk2","product":{"name":"EG603W Mk2","product_id":"p19","product_identification_helper":{"model_numbers":["WEG600100140"]}}},{"category":"product_name","name":"EG603L Mk2","product":{"name":"EG603L Mk2","product_id":"p20","product_identification_helper":{"model_numbers":["WEG600100150"]}}},{"category":"product_name","name":"EG802W","product":{"name":"EG802W","product_id":"p21","product_identification_helper":{"model_numbers":["WEG800100010"]}}},{"category":"product_name","name":"EG804W","product":{"name":"EG804W","product_id":"p22","product_identification_helper":{"model_numbers":["WEG800100020"]}}},{"category":"product_name","name":"EG802W_i7_512GB_DinRail","product":{"name":"EG802W_i7_512GB_DinRail","product_id":"p23","product_identification_helper":{"model_numbers":["WEG800100040"]}}},{"category":"product_name","name":"EG802W_i7_512GB_w/o DinRail","product":{"name":"EG802W_i7_512GB_w/o DinRail","product_id":"p24","product_identification_helper":{"model_numbers":["WEG800100050"]}}},{"category":"product_name","name":"EG804W Pro","product":{"name":"EG804W Pro","product_id":"p25","product_identification_helper":{"model_numbers":["WEG800100090"]}}}],"category":"product_family","name":"Hardware"},{"branches":[{"category":"product_version_range","name":"<v1.7.7","product":{"name":"egOS <v1.7.7","product_id":"fw-21001"}},{"category":"product_version_range","name":"v1.8.0<v1.8.2","product":{"name":"egOS v1.8.0<v1.8.2","product_id":"fw-21002"}},{"category":"product_version","name":"v1.7.7","product":{"name":"egOS v1.7.7","product_id":"fw-22001"}},{"category":"product_version","name":"v1.8.2","product":{"name":"egOS v1.8.2","product_id":"fw-22002"}}],"category":"product_family","name":"Firmware"}],"category":"vendor","name":"Welotec"}],"product_groups":[{"group_id":"CSAFGID-0001","product_ids":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025"],"summary":"Affected products: egOS < v1.7.7."},{"group_id":"CSAFGID-0003","product_ids":["CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037","CSAFPID-31038","CSAFPID-31039","CSAFPID-31040","CSAFPID-31041","CSAFPID-31042","CSAFPID-31043","CSAFPID-31044","CSAFPID-31045","CSAFPID-31046","CSAFPID-31047","CSAFPID-31048","CSAFPID-31049","CSAFPID-31050"],"summary":"Affected products: egOS v1.8.0<v1.8.2."},{"group_id":"CSAFGID-0002","product_ids":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025"],"summary":"Fixed products: egOS v1.7.7."},{"group_id":"CSAFGID-0004","product_ids":["CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037","CSAFPID-32038","CSAFPID-32039","CSAFPID-32040","CSAFPID-32041","CSAFPID-32042","CSAFPID-32043","CSAFPID-32044","CSAFPID-32045","CSAFPID-32046","CSAFPID-32047","CSAFPID-32048","CSAFPID-32049","CSAFPID-32050"],"summary":"Fixed products: egOS v1.8.2."}],"relationships":[{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG400Mk2-D11001-000101","product_id":"CSAFPID-31001"},"product_reference":"fw-21001","relates_to_product_reference":"p01"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG400Mk2-D11101-000101","product_id":"CSAFPID-31002"},"product_reference":"fw-21001","relates_to_product_reference":"p02"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG503W","product_id":"CSAFPID-31003"},"product_reference":"fw-21001","relates_to_product_reference":"p03"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG503L","product_id":"CSAFPID-31004"},"product_reference":"fw-21001","relates_to_product_reference":"p04"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG503W_4GB","product_id":"CSAFPID-31005"},"product_reference":"fw-21001","relates_to_product_reference":"p05"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG503L_4GB","product_id":"CSAFPID-31006"},"product_reference":"fw-21001","relates_to_product_reference":"p06"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG503L-G","product_id":"CSAFPID-31007"},"product_reference":"fw-21001","relates_to_product_reference":"p07"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG500Mk2-A11101-000101","product_id":"CSAFPID-31008"},"product_reference":"fw-21001","relates_to_product_reference":"p08"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG500Mk2-A11001-000101","product_id":"CSAFPID-31009"},"product_reference":"fw-21001","relates_to_product_reference":"p09"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG500Mk2-B11101-000101","product_id":"CSAFPID-31010"},"product_reference":"fw-21001","relates_to_product_reference":"p10"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG500Mk2-B11001-000101","product_id":"CSAFPID-31011"},"product_reference":"fw-21001","relates_to_product_reference":"p11"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG500Mk2-C11101-000101","product_id":"CSAFPID-31012"},"product_reference":"fw-21001","relates_to_product_reference":"p12"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG500Mk2-C11001-000101","product_id":"CSAFPID-31013"},"product_reference":"fw-21001","relates_to_product_reference":"p13"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG500Mk2-A12011-000101","product_id":"CSAFPID-31014"},"product_reference":"fw-21001","relates_to_product_reference":"p14"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG500Mk2-A11001-000201","product_id":"CSAFPID-31015"},"product_reference":"fw-21001","relates_to_product_reference":"p15"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG500Mk2-A21101-000101","product_id":"CSAFPID-31016"},"product_reference":"fw-21001","relates_to_product_reference":"p16"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG602W","product_id":"CSAFPID-31017"},"product_reference":"fw-21001","relates_to_product_reference":"p17"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG602L","product_id":"CSAFPID-31018"},"product_reference":"fw-21001","relates_to_product_reference":"p18"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG603W Mk2","product_id":"CSAFPID-31019"},"product_reference":"fw-21001","relates_to_product_reference":"p19"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG603L Mk2","product_id":"CSAFPID-31020"},"product_reference":"fw-21001","relates_to_product_reference":"p20"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG802W","product_id":"CSAFPID-31021"},"product_reference":"fw-21001","relates_to_product_reference":"p21"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG804W","product_id":"CSAFPID-31022"},"product_reference":"fw-21001","relates_to_product_reference":"p22"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG802W_i7_512GB_DinRail","product_id":"CSAFPID-31023"},"product_reference":"fw-21001","relates_to_product_reference":"p23"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG802W_i7_512GB_w/o DinRail","product_id":"CSAFPID-31024"},"product_reference":"fw-21001","relates_to_product_reference":"p24"},{"category":"installed_on","full_product_name":{"name":"egOS <v1.7.7 installed on EG804W Pro","product_id":"CSAFPID-31025"},"product_reference":"fw-21001","relates_to_product_reference":"p25"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG400Mk2-D11001-000101","product_id":"CSAFPID-31026"},"product_reference":"fw-21002","relates_to_product_reference":"p01"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG400Mk2-D11101-000101","product_id":"CSAFPID-31027"},"product_reference":"fw-21002","relates_to_product_reference":"p02"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG503W","product_id":"CSAFPID-31028"},"product_reference":"fw-21002","relates_to_product_reference":"p03"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG503L","product_id":"CSAFPID-31029"},"product_reference":"fw-21002","relates_to_product_reference":"p04"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG503W_4GB","product_id":"CSAFPID-31030"},"product_reference":"fw-21002","relates_to_product_reference":"p05"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG503L_4GB","product_id":"CSAFPID-31031"},"product_reference":"fw-21002","relates_to_product_reference":"p06"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG503L-G","product_id":"CSAFPID-31032"},"product_reference":"fw-21002","relates_to_product_reference":"p07"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG500Mk2-A11101-000101","product_id":"CSAFPID-31033"},"product_reference":"fw-21002","relates_to_product_reference":"p08"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG500Mk2-A11001-000101","product_id":"CSAFPID-31034"},"product_reference":"fw-21002","relates_to_product_reference":"p09"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG500Mk2-B11101-000101","product_id":"CSAFPID-31035"},"product_reference":"fw-21002","relates_to_product_reference":"p10"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG500Mk2-B11001-000101","product_id":"CSAFPID-31036"},"product_reference":"fw-21002","relates_to_product_reference":"p11"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG500Mk2-C11101-000101","product_id":"CSAFPID-31037"},"product_reference":"fw-21002","relates_to_product_reference":"p12"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG500Mk2-C11001-000101","product_id":"CSAFPID-31038"},"product_reference":"fw-21002","relates_to_product_reference":"p13"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG500Mk2-A12011-000101","product_id":"CSAFPID-31039"},"product_reference":"fw-21002","relates_to_product_reference":"p14"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG500Mk2-A11001-000201","product_id":"CSAFPID-31040"},"product_reference":"fw-21002","relates_to_product_reference":"p15"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG500Mk2-A21101-000101","product_id":"CSAFPID-31041"},"product_reference":"fw-21002","relates_to_product_reference":"p16"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG602W","product_id":"CSAFPID-31042"},"product_reference":"fw-21002","relates_to_product_reference":"p17"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG602L","product_id":"CSAFPID-31043"},"product_reference":"fw-21002","relates_to_product_reference":"p18"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG603W Mk2","product_id":"CSAFPID-31044"},"product_reference":"fw-21002","relates_to_product_reference":"p19"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG603L Mk2","product_id":"CSAFPID-31045"},"product_reference":"fw-21002","relates_to_product_reference":"p20"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG802W","product_id":"CSAFPID-31046"},"product_reference":"fw-21002","relates_to_product_reference":"p21"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG804W","product_id":"CSAFPID-31047"},"product_reference":"fw-21002","relates_to_product_reference":"p22"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG802W_i7_512GB_DinRail","product_id":"CSAFPID-31048"},"product_reference":"fw-21002","relates_to_product_reference":"p23"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG802W_i7_512GB_w/o DinRail","product_id":"CSAFPID-31049"},"product_reference":"fw-21002","relates_to_product_reference":"p24"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.0<v1.8.2 installed on EG804W Pro","product_id":"CSAFPID-31050"},"product_reference":"fw-21002","relates_to_product_reference":"p25"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG400Mk2-D11001-000101","product_id":"CSAFPID-32001"},"product_reference":"fw-22001","relates_to_product_reference":"p01"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG400Mk2-D11101-000101","product_id":"CSAFPID-32002"},"product_reference":"fw-22001","relates_to_product_reference":"p02"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG503W","product_id":"CSAFPID-32003"},"product_reference":"fw-22001","relates_to_product_reference":"p03"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG503L","product_id":"CSAFPID-32004"},"product_reference":"fw-22001","relates_to_product_reference":"p04"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG503W_4GB","product_id":"CSAFPID-32005"},"product_reference":"fw-22001","relates_to_product_reference":"p05"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG503L_4GB","product_id":"CSAFPID-32006"},"product_reference":"fw-22001","relates_to_product_reference":"p06"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG503L-G","product_id":"CSAFPID-32007"},"product_reference":"fw-22001","relates_to_product_reference":"p07"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG500Mk2-A11101-000101","product_id":"CSAFPID-32008"},"product_reference":"fw-22001","relates_to_product_reference":"p08"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG500Mk2-A11001-000101","product_id":"CSAFPID-32009"},"product_reference":"fw-22001","relates_to_product_reference":"p09"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG500Mk2-B11101-000101","product_id":"CSAFPID-32010"},"product_reference":"fw-22001","relates_to_product_reference":"p10"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG500Mk2-B11001-000101","product_id":"CSAFPID-32011"},"product_reference":"fw-22001","relates_to_product_reference":"p11"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG500Mk2-C11101-000101","product_id":"CSAFPID-32012"},"product_reference":"fw-22001","relates_to_product_reference":"p12"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG500Mk2-C11001-000101","product_id":"CSAFPID-32013"},"product_reference":"fw-22001","relates_to_product_reference":"p13"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG500Mk2-A12011-000101","product_id":"CSAFPID-32014"},"product_reference":"fw-22001","relates_to_product_reference":"p14"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG500Mk2-A11001-000201","product_id":"CSAFPID-32015"},"product_reference":"fw-22001","relates_to_product_reference":"p15"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG500Mk2-A21101-000101","product_id":"CSAFPID-32016"},"product_reference":"fw-22001","relates_to_product_reference":"p16"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG602W","product_id":"CSAFPID-32017"},"product_reference":"fw-22001","relates_to_product_reference":"p17"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG602L","product_id":"CSAFPID-32018"},"product_reference":"fw-22001","relates_to_product_reference":"p18"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG603W Mk2","product_id":"CSAFPID-32019"},"product_reference":"fw-22001","relates_to_product_reference":"p19"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG603L Mk2","product_id":"CSAFPID-32020"},"product_reference":"fw-22001","relates_to_product_reference":"p20"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG802W","product_id":"CSAFPID-32021"},"product_reference":"fw-22001","relates_to_product_reference":"p21"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG804W","product_id":"CSAFPID-32022"},"product_reference":"fw-22001","relates_to_product_reference":"p22"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG802W_i7_512GB_DinRail","product_id":"CSAFPID-32023"},"product_reference":"fw-22001","relates_to_product_reference":"p23"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG802W_i7_512GB w/o DinRail","product_id":"CSAFPID-32024"},"product_reference":"fw-22001","relates_to_product_reference":"p24"},{"category":"installed_on","full_product_name":{"name":"egOS v1.7.7 installed on EG804W Pro","product_id":"CSAFPID-32025"},"product_reference":"fw-22001","relates_to_product_reference":"p25"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG400Mk2-D11001-000101","product_id":"CSAFPID-32026"},"product_reference":"fw-22002","relates_to_product_reference":"p01"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG400Mk2-D11101-000101","product_id":"CSAFPID-32027"},"product_reference":"fw-22002","relates_to_product_reference":"p02"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG503W","product_id":"CSAFPID-32028"},"product_reference":"fw-22002","relates_to_product_reference":"p03"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG503L","product_id":"CSAFPID-32029"},"product_reference":"fw-22002","relates_to_product_reference":"p04"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG503W_4GB","product_id":"CSAFPID-32030"},"product_reference":"fw-22002","relates_to_product_reference":"p05"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG503L_4GB","product_id":"CSAFPID-32031"},"product_reference":"fw-22002","relates_to_product_reference":"p06"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG503L-G","product_id":"CSAFPID-32032"},"product_reference":"fw-22002","relates_to_product_reference":"p07"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG500Mk2-A11101-000101","product_id":"CSAFPID-32033"},"product_reference":"fw-22002","relates_to_product_reference":"p08"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG500Mk2-A11001-000101","product_id":"CSAFPID-32034"},"product_reference":"fw-22002","relates_to_product_reference":"p09"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG500Mk2-B11101-000101","product_id":"CSAFPID-32035"},"product_reference":"fw-22002","relates_to_product_reference":"p10"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG500Mk2-B11001-000101","product_id":"CSAFPID-32036"},"product_reference":"fw-22002","relates_to_product_reference":"p11"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG500Mk2-C11101-000101","product_id":"CSAFPID-32037"},"product_reference":"fw-22002","relates_to_product_reference":"p12"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG500Mk2-C11001-000101","product_id":"CSAFPID-32038"},"product_reference":"fw-22002","relates_to_product_reference":"p13"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG500Mk2-A12011-000101","product_id":"CSAFPID-32039"},"product_reference":"fw-22002","relates_to_product_reference":"p14"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG500Mk2-A11001-000201","product_id":"CSAFPID-32040"},"product_reference":"fw-22002","relates_to_product_reference":"p15"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG500Mk2-A21101-000101","product_id":"CSAFPID-32041"},"product_reference":"fw-22002","relates_to_product_reference":"p16"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG602W","product_id":"CSAFPID-32042"},"product_reference":"fw-22002","relates_to_product_reference":"p17"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG602L","product_id":"CSAFPID-32043"},"product_reference":"fw-22002","relates_to_product_reference":"p18"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG603W Mk2","product_id":"CSAFPID-32044"},"product_reference":"fw-22002","relates_to_product_reference":"p19"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG603L Mk2","product_id":"CSAFPID-32045"},"product_reference":"fw-22002","relates_to_product_reference":"p20"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG802W","product_id":"CSAFPID-32046"},"product_reference":"fw-22002","relates_to_product_reference":"p21"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG804W","product_id":"CSAFPID-32047"},"product_reference":"fw-22002","relates_to_product_reference":"p22"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG802W_i7_512GB_DinRail","product_id":"CSAFPID-32048"},"product_reference":"fw-22002","relates_to_product_reference":"p23"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG802W_i7_512GB w/o DinRail","product_id":"CSAFPID-32049"},"product_reference":"fw-22002","relates_to_product_reference":"p24"},{"category":"installed_on","full_product_name":{"name":"egOS v1.8.2 installed on EG804W Pro","product_id":"CSAFPID-32050"},"product_reference":"fw-22002","relates_to_product_reference":"p25"}]},"vulnerabilities":[{"cve":"CVE-2025-41702","cwe":{"id":"CWE-321","name":"Use of Hard-coded Cryptographic Key"},"notes":[{"category":"description","text":"The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.","title":"Vulnerability Description"}],"product_status":{"fixed":["CSAFPID-32001","CSAFPID-32002","CSAFPID-32003","CSAFPID-32004","CSAFPID-32005","CSAFPID-32006","CSAFPID-32007","CSAFPID-32008","CSAFPID-32009","CSAFPID-32010","CSAFPID-32011","CSAFPID-32012","CSAFPID-32013","CSAFPID-32014","CSAFPID-32015","CSAFPID-32016","CSAFPID-32017","CSAFPID-32018","CSAFPID-32019","CSAFPID-32020","CSAFPID-32021","CSAFPID-32022","CSAFPID-32023","CSAFPID-32024","CSAFPID-32025","CSAFPID-32026","CSAFPID-32027","CSAFPID-32028","CSAFPID-32029","CSAFPID-32030","CSAFPID-32031","CSAFPID-32032","CSAFPID-32033","CSAFPID-32034","CSAFPID-32035","CSAFPID-32036","CSAFPID-32037","CSAFPID-32038","CSAFPID-32039","CSAFPID-32040","CSAFPID-32041","CSAFPID-32042","CSAFPID-32043","CSAFPID-32044","CSAFPID-32045","CSAFPID-32046","CSAFPID-32047","CSAFPID-32048","CSAFPID-32049","CSAFPID-32050"],"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037","CSAFPID-31038","CSAFPID-31039","CSAFPID-31040","CSAFPID-31041","CSAFPID-31042","CSAFPID-31043","CSAFPID-31044","CSAFPID-31045","CSAFPID-31046","CSAFPID-31047","CSAFPID-31048","CSAFPID-31049","CSAFPID-31050"]},"remediations":[{"category":"mitigation","details":"Temporarily disable the WebGUI or restrict network access to the WebGUI to trusted admin stations.","group_ids":["CSAFGID-0001","CSAFGID-0003"]},{"category":"vendor_fix","details":"Update egOS to version v1.7.7 or v1.8.2.","group_ids":["CSAFGID-0001","CSAFGID-0003"]}],"scores":[{"cvss_v3":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026","CSAFPID-31027","CSAFPID-31028","CSAFPID-31029","CSAFPID-31030","CSAFPID-31031","CSAFPID-31032","CSAFPID-31033","CSAFPID-31034","CSAFPID-31035","CSAFPID-31036","CSAFPID-31037","CSAFPID-31038","CSAFPID-31039","CSAFPID-31040","CSAFPID-31041","CSAFPID-31042","CSAFPID-31043","CSAFPID-31044","CSAFPID-31045","CSAFPID-31046","CSAFPID-31047","CSAFPID-31048","CSAFPID-31049","CSAFPID-31050"]}],"title":"CVE-2025-41702"}]}