CVE-2026-111100
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Oct 22, 2026
Vendor
unknown
Description
The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting vulnerable devices and preparing targeted credential attacks.