Advisories · Technology
Acer Connect M6E 5G Portable WiFi Router.
Every CVE that names Acer Connect M6E 5G Portable WiFi Router among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Firmware Theft & IMEI Spoofing via Connect-OTA
- Acer Connect M6E 5G Portable WiFi Router
- Hard-coded credentials
- CVSS 8.8 High
Account Creation Exhaustion
- Acer Connect M6E 5G Portable WiFi Router
- Authentication bypass
- CVSS 6.9 Medium
Unauthenticated IPv6 WAN Management Exposure
- Acer Connect M6E 5G Portable WiFi Router
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
Shared Secret Quota Inflation
- Acer Connect M6E 5G Portable WiFi Router
- CWE-345
- CVSS 8.7 High
Bulk User Private Data Harvesting
- Acer Connect M6E 5G Portable WiFi Router
- Hard-coded credentials
- CVSS 7.1 High
Arbitrary Remote Device Unbinding
- Acer Connect M6E 5G Portable WiFi Router
- Denial of service
- CVSS 8.8 High
Exposed Factory Testing App Boundaries
- Acer Connect M6E 5G Portable WiFi Router
- Memory corruption
- CVSS 6.9 Medium
Weak Static Cryptographic Initialization Vectors
- Acer Connect M6E 5G Portable WiFi Router
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
MDM Server Registration Overriding
- Acer Connect M6E 5G Portable WiFi Router
- Broken access control
- CVSS 9.2 CriticalCritical · CVSS 9+
Permissive TrustAllCerts TLS Verification
- Acer Connect M6E 5G Portable WiFi Router
- Weak cryptography or TLS
- CVSS 8.5 High
Local Modem Manipulation via Binder Interfaces
- Acer Connect M6E 5G Portable WiFi Router
- Path traversal
- CVSS 8.5 High
VPN Command Injection Vulnerability
- Acer Connect M6E 5G Portable WiFi Router
- Command injection
- CVSS 8.8 High
Plaintext Log Credential Leakage
- Acer Connect M6E 5G Portable WiFi Router
- Information disclosure
- CVSS 6.9 Medium
Hard-coded AWS Cognito Testing Accounts
- Acer Connect M6E 5G Portable WiFi Router
- Hard-coded credentials
- CVSS 8.8 High
Unverified Meeting Recording Endpoints & Permissive CORS
- Acer Connect M6E 5G Portable WiFi Router
- Authentication bypass
- CVSS 7.2 High
Unauthenticated eSIM Configuration Manipulation
- Acer Connect M6E 5G Portable WiFi Router
- Authentication bypass
- CVSS 9.4 CriticalCritical · CVSS 9+
SCREEN_CLICK Authentication Bypass
- Acer Connect M6E 5G Portable WiFi Router
- Authentication bypass
- CVSS 8.7 High
Publicly Readable AWS S3 Telemetry Buckets
- Acer Connect M6E 5G Portable WiFi Router
- Information disclosure
- CVSS 5.3 Medium
Summary Service Insecure Direct Object Reference
- Acer Connect M6E 5G Portable WiFi Router
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Exposed Hard-coded M3WebServer Backend API Key
- Acer Connect M6E 5G Portable WiFi Router
- Authentication bypass
- CVSS 9.4 CriticalCritical · CVSS 9+
Missing Per-Instruction Authorization Checks
- Acer Connect M6E 5G Portable WiFi Router
- Command injection
- CVSS 8.5 High
Broadcast Receiver Privilege Escalation
- Acer Connect M6E 5G Portable WiFi Router
- Privilege escalation
- CVSS 8.7 High
Elevated Root Command Execution via ai_cmd Sockets
- Acer Connect M6E 5G Portable WiFi Router
- CWE-489
- CVSS 8.7 High
Hard-coded APK Resource Credentials & Scepters
- Acer Connect M6E 5G Portable WiFi Router
- Information disclosure
- CVSS 8.6 High
Lack of MQTT Broker Topic Access Control Lists
- Acer Connect M6E 5G Portable WiFi Router
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
Instruction Injection via FieldX MDM
- Acer Connect M6E 5G Portable WiFi Router
- Command injection