Information Disclosure Vulnerability in Dixell Copeland XWEB EVO Product

CVE-2026-124011

What is CVE-2026-124011?

The XWEB EVO product line from Dixell has a vulnerability that allows unauthorized access to sensitive information via sysinfo.lua. Attackers can exploit this flaw to retrieve the device's eth0 MAC address and system clock values without requiring authentication. This extracted information could potentially enable them to derive MAC-based daily passwords, which may grant them unauthorized access to the device. Users are encouraged to apply the latest patches to safeguard their equipment.

References