Silex Tech Devices Vulnerable to Insecure Default Passwords

The National Vulnerability Database (NVD) reports CVE-2026-32965, a high-severity vulnerability (CVSS 7.5) affecting silex technology, Inc.’s SD-330AC and AMC Manager. This flaw, categorized as CWE-1188 (Initialization of a resource with an insecure default), allows devices to be configured with a null string password when connected to a network using their factory-default settings.

This isn’t a complex exploit. An attacker doesn’t need to bypass authentication; they just need to know the default configuration is weak. The NVD highlights that an unauthenticated attacker can achieve high integrity impact (I:H) simply by connecting to the device over the network (AV:N) with no user interaction (UI:N). The core issue is an insecure initialization that leaves devices exposed from the moment they’re plugged in.

For defenders, this means any silex technology SD-330AC or AMC Manager devices deployed with default settings are wide open. Attackers are constantly scanning for low-hanging fruit, and an unauthenticated network-based vulnerability with a null password is exactly that. It’s an open invitation for unauthorized configuration changes or worse, using the compromised device as a pivot point into the network.