DUOX PLUS monitor firmware (VEO Wi-Fi range) vulnerabilities

3 known vulnerabilities in DUOX PLUS monitor firmware (VEO Wi-Fi range) from Fermax Electronica S.A.U.. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  DUOX PLUS monitor firmware (VEO Wi-Fi range): Improper Verification of Cryptographic Signature

  CVE-2026-86585Sep 16, 2026Fermax Electronica S.A.U.

  The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware.

• 7.7 High severity

  DUOX PLUS monitor firmware (VEO Wi-Fi range): Improper Certificate Validation

  CVE-2026-86474Sep 16, 2026Fermax Electronica S.A.U.

  The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.

• 7.0 High severity

  DuoxMe: Cleartext Transmission of Sensitive Information

  CVE-2026-85628Sep 16, 2026Fermax Electronica S.A.U.

  Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker o