Unauthorized Access in HMS Networks Switches

CVE-2026-33272

What is CVE-2026-33272?

A vulnerability exists in HMS Networks switches that allows a malicious user with physical access to the device to exploit factory settings. By booting the switch without authentication, the attacker can use default administrative credentials to gain full control. This access permits the modification of the configuration file, ensuring that these changes will persist when the device is restarted. Organizations using HMS Networks switches should ensure physical security measures are in place to mitigate this risk.

References