CarlinKit vulnerabilities
We track 3 vulnerabilities in CarlinKit products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 23, 2025.
Latest CarlinKit vulnerabilities
- 8.8 High severity
CPC200-CCPA: Use of Hard-coded Credentials
CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not r
- 8.0 High severity
CPC200-CCPA: Improper Verification of Cryptographic Signature
CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of CarlinKit CPC200-CCPA devices. Although
- 7.8 High severity
CPC200-CCPA: Missing Immutable Root of Trust in Hardware
CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of CarlinKit CPC200-CCPA devices. An attacker must first obtain the ability to exec