Ebyte NE2-D11

A CISA advisory highlights critical vulnerabilities in Ebyte NE2-D11 devices, primarily due to a lack of consistent authentication enforcement and cleartext transmission of sensitive information. The vendor, Ebyte, has not responded to requests for coordination regarding a patch, leaving users vulnerable. These flaws could allow unauthorized access to device configuration, disclosure of sensitive data, and disruption of device operation, impacting critical infrastructure sectors like manufacturing and energy. Users are urged to minimize network exposure and reach out to Ebyte for updates.