Platform
other
Component
metis-wic
Fixed in
2.1.235
CVE-2026-2248 describes a critical vulnerability in METIS WIC devices running oscore versions up to 2.1.234-r18. This vulnerability allows an attacker to execute arbitrary operating system commands with root privileges through an unauthenticated web shell accessible at the /console endpoint. Successful exploitation results in complete system compromise. A patch is available in oscore version 2.1.236.
The impact of CVE-2026-2248 is severe. An attacker gaining access to the /console endpoint can execute any command on the device with root privileges. This allows for complete control over the device, including the ability to modify system configurations, steal sensitive data (passwords, keys, configuration files), install malware, and disrupt device operations. The lack of authentication makes this vulnerability particularly dangerous, as any attacker with network access to the device can potentially exploit it. This is akin to having an open backdoor into the device's operating system.
CVE-2026-2248 was publicly disclosed on 2026-02-11. The vulnerability is considered highly exploitable due to the lack of authentication and the ability to execute arbitrary commands with root privileges. No public proof-of-concept (POC) code has been released as of this writing, but the ease of exploitation suggests that it is likely to be developed and shared. It has not yet been added to the CISA KEV catalog.
Exploit Status
EPSS
0.29% (52% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2026-2248 is to upgrade METIS WIC devices to oscore version 2.1.236 or later. If an immediate upgrade is not possible, consider implementing network segmentation to restrict access to the /console endpoint. Firewall rules should be configured to only allow access from trusted IP addresses. Monitoring network traffic for unusual activity targeting the /console endpoint is also recommended. While a WAF might be able to detect and block malicious requests, it is not a substitute for patching the underlying vulnerability. After upgrading, verify the vulnerability is resolved by attempting to access the /console endpoint and confirming that authentication is required.
Actualice el firmware de su dispositivo METIS WIC a una versión posterior a oscore 2.1.235-r19. Consulte el sitio web del proveedor para obtener las últimas actualizaciones de firmware y las instrucciones de instalación. Deshabilite el acceso a la consola web si no es necesaria.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2026-2248 is a critical vulnerability in METIS WIC devices where an unauthenticated attacker can execute OS commands with root privileges via the /console endpoint, leading to full system compromise.
You are affected if you are using METIS WIC devices with oscore versions less than or equal to 2.1.234-r18.
Upgrade your METIS WIC devices to oscore version 2.1.236 or later. Implement network segmentation and monitor traffic to the /console endpoint as a temporary workaround.
While no public exploits are currently known, the ease of exploitation suggests it is likely to be targeted. Continuous monitoring is advised.
Refer to the METIS WIC security advisories on their official website for the latest information and updates regarding CVE-2026-2248.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.