CVE-2020-25746

Published: Nov 17, 2020Modified: Jun 17, 2026

4.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.9 / Impact: 3.6

Source: NVD

Description

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obtain sensitive information via the debug interface (keystrokes over a USB cable), aka wireless password visibility.

Affected (1)

Products: Resourcexpress: Qubi3 Firmware

Resourcexpress

1 product

Qubi3 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Resourcexpress Qubi3 Firmware	Before 1.40.9

Running on/with	Platform Versions
Resourcexpress Qubi3	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/878641153/v1.40.9

Source: cve@mitre.org

Issue TrackingVendor Advisory

https://www.resourcexpress.com/meeting-room-booking-systems/hardware/qubi3/

Source: cve@mitre.org

ProductVendor Advisory

https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/878641153/v1.40.9

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://www.resourcexpress.com/meeting-room-booking-systems/hardware/qubi3/

Source: af854a3a-2127-422b-91ae-364da2661108

ProductVendor Advisory

Timeline

No history available yet.