Fermax Electronica S.A.U. vulnerabilities
We track 4 vulnerabilities in Fermax Electronica S.A.U. products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
Latest Fermax Electronica S.A.U. vulnerabilities
- 7.7 High severity
DUOX PLUS monitor firmware (VEO Wi-Fi range): Improper Verification of Cryptographic Signature
The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware.
- 7.7 High severity
DUOX PLUS monitor firmware (VEO Wi-Fi range): Improper Certificate Validation
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.
- 7.0 High severity
DuoxMe: Cleartext Transmission of Sensitive Information
Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker o
- 8.8 High severity
MeetMe: Insecure Storage of Sensitive Information
Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5.