CVE-2026-38058

Evolution iQ‑Series terminals · Vulnerability

CVSS 3.1 8.1 HIGHCVSS 4.0 8.6 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-38058

Published

The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them offline using commodity hardware.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-38058

Published

Evolution iQ‑Series terminals

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "ST Engineering iDirect",
                    "product": "Evolution iQ‑Series terminals",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThanOrEqual": "4.5.2.1",
                            "versionType": "custom"
                        },
                        {
                            "status": "unaffected",
                            "version": "4.5.3.0"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

3315-Series terminals

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "ST Engineering iDirect",
                    "product": "3315-Series terminals",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThanOrEqual": "4.5.2.1",
                            "versionType": "custom"
                        },
                        {
                            "status": "unaffected",
                            "version": "4.5.3.0"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

9-Series Terminals

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "ST Engineering iDirect",
                    "product": "9-Series Terminals",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThanOrEqual": "4.5.2.1",
                            "versionType": "custom"
                        },
                        {
                            "status": "unaffected",
                            "version": "4.5.3.0"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON