CVE
CVE-2026-32959
silex technology, Inc. · AMC Manager; silex technology, Inc. · SD-330AC
- First Reported
- Apr 21, 2026
- Latest Reported
- Apr 21, 2026
CVE Enrichment
- CVSS
- 8.2 HIGH
- EPSS
- 0.21%
- EPSS Percentile
- 11.23%
- CISA KEV
- Not listed
Description
SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a use of a broken or risky cryptographic algorithm. Information in the traffic may be retrieved via man-in-the-middle attack.
Technical Details
- CVSS Version
- 4.0
- CNA / NVD Source
- [email protected]
- Published
- 20-Apr-2026 11:16
- Last Modified
- 27-Oct-2026 04:10
- EPSS Date
- 2026-11-04
- CWE
- CWE-327
CVSS Vector
CVSS:4.0 AV:N /
AC:L /
AT:P /
PR:N /
UI:N /
VC:H /
VI:N /
VA:N /
SC:N /
SI:N /
SA:N /
E:X /
CR:X /
IR:X /
AR:X /
MAV:X /
MAC:X /
MAT:X /
MPR:X /
MUI:X /
MVC:X /
MVI:X /
MVA:X /
MSC:X /
MSI:X /
MSA:X /
S:X /
AU:X /
R:X /
V:X /
RE:X /
U:X
CNA Products / Version Status
- silex technology, Inc. · AMC Manager
Source: CNA · [email protected]
Default status: unknown
Ver.5.0.2 and earlier — affected
- silex technology, Inc. · SD-330AC
Source: CNA · [email protected]
Default status: unknown
Ver.1.42 and earlier — affected
Affected Products / Versions
- silextechnology / sd-330ac_firmware
Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 1.50
cpe:2.3:o:silextechnology:sd-330ac_firmware:*:*:*:*:*:*:*:* - silextechnology / amc_manager
Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 5.1.0
cpe:2.3:a:silextechnology:amc_manager:*:*:*:*:*:*:*:*
References
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- Information disclosure – CVE-2026-32959 BRIDGE:BREAK Flaws Put Nearly 20,000 Serial-to-IP Converters at Risk
CVE (20)
MITRE ATT&CK (2)
Vendors (2)
Products (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
