{"api_version":"1","generated_at":"2026-10-15T22:35:37+00:00","cve":"CVE-2026-105033","urls":{"html":"https://cve.report/CVE-2026-105033","api":"https://cve.report/api/cve/CVE-2026-105033.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-105033","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-105033"},"summary":{"title":"EnergizeLab AI Station Default Root Credentials with SSH Enabled","description":"The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.","state":"PUBLISHED","assigner":"AHA","published_at":"2026-10-15 21:17:03","updated_at":"2026-10-15 21:17:03"},"problem_types":["CWE-798","CWE-798 CWE-798 Use of Hard-coded Credentials"],"metrics":[{"version":"3.1","source":"cve@takeonme.org","type":"Secondary","score":"8.8","severity":"HIGH","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"8.8","severity":"HIGH","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"references":[{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","name":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","refsource":"cve@takeonme.org","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","name":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","refsource":"cve@takeonme.org","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111110111111111111000000000000000000000000000000000000000000000000000001101/","name":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111110111111111111000000000000000000000000000000000000000000000000000001101/","refsource":"cve@takeonme.org","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-105033","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105033","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"EnergizeLab","product":"AI Station firmware (RK3562)","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Sammy Azdoufal","lang":"en"},{"source":"CNA","value":"todb of AHA!","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"AI Station firmware (RK3562)","vendor":"EnergizeLab","versions":[{"status":"affected","version":"n/a"}]}],"credits":[{"lang":"en","type":"finder","value":"Sammy Azdoufal"},{"lang":"en","type":"coordinator","value":"todb of AHA!"}],"datePublic":"2026-10-15T12:00:00.000Z","descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it."}],"value":"The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"other":{"content":{"options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CNA","version":"2.0.3"},"type":"ssvc"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-798","description":"CWE-798 Use of Hard-coded Credentials","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-15T20:42:34.038Z","orgId":"26969f82-7e87-44d8-9cb5-f6fb926ddd43","shortName":"AHA"},"references":[{"tags":["technical-description"],"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me"},{"tags":["third-party-advisory"],"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111110111111111111000000000000000000000000000000000000000000000000000001101/"},{"tags":["media-coverage"],"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab"}],"source":{"discovery":"EXTERNAL"},"title":"EnergizeLab AI Station Default Root Credentials with SSH Enabled","x_generator":{"engine":"Vulnogram 1.0.2"}}},"cveMetadata":{"assignerOrgId":"26969f82-7e87-44d8-9cb5-f6fb926ddd43","assignerShortName":"AHA","cveId":"CVE-2026-105033","datePublished":"2026-10-15T20:42:34.038Z","dateReserved":"2026-10-02T21:30:55.242Z","dateUpdated":"2026-10-15T20:42:34.038Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-15 21:17:03","lastModifiedDate":"2026-10-15 21:17:03","problem_types":["CWE-798","CWE-798 CWE-798 Use of Hard-coded Credentials"],"metrics":{"cvssMetricV31":[{"source":"cve@takeonme.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"cve@takeonme.org","ssvcData":{"options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CNA","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"105033","Ordinal":"1","Title":"EnergizeLab AI Station Default Root Credentials with SSH Enabled","CVE":"CVE-2026-105033","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"105033","Ordinal":"1","NoteData":"The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.","Type":"Description","Title":"EnergizeLab AI Station Default Root Credentials with SSH Enabled"}]}}}