Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
2 vulnerabilities found for BC760 by Watchfire
CVE-2026-5846 (GCVE-0-2026-5846)
Vulnerability from nvd – Published: 2026-07-30 21:12 – Updated: 2026-07-31 20:12
VLAI
EPSS
VEX
Title
Hard-coded Cryptographic Key in Watchfire Controllers
Summary
The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management interface. These keys are embedded in plaintext within the application patch binaries in the firmware directly from Watchfire's Remote Support filestore.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-321 - Use of hard-coded cryptographic key
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Watchfire | BC550 |
Affected:
12.30
Unaffected: 12.31 SP1 |
|
| Watchfire | BC750 |
Affected:
11.33
Unaffected: 11.34 Affected: 12.35 Unaffected: 12.36 SP1 |
|
| Watchfire | BC760 |
Affected:
12.38
Unaffected: 12.41 SP1 Affected: 13.00 Unaffected: 14.00 SP1 |
|
| Watchfire | BC760DC |
Affected:
12.39
Unaffected: 12.41 SP1 |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-5846",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-31T15:31:12.383337Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-31T15:31:33.658Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "BC550",
"vendor": "Watchfire",
"versions": [
{
"status": "affected",
"version": "12.30"
},
{
"status": "unaffected",
"version": "12.31 SP1"
}
]
},
{
"defaultStatus": "unaffected",
"product": "BC750",
"vendor": "Watchfire",
"versions": [
{
"status": "affected",
"version": "11.33"
},
{
"status": "unaffected",
"version": "11.34"
},
{
"status": "affected",
"version": "12.35"
},
{
"status": "unaffected",
"version": "12.36 SP1"
}
]
},
{
"defaultStatus": "unaffected",
"product": "BC760",
"vendor": "Watchfire",
"versions": [
{
"status": "affected",
"version": "12.38"
},
{
"status": "unaffected",
"version": "12.41 SP1"
},
{
"status": "affected",
"version": "13.00"
},
{
"status": "unaffected",
"version": "14.00 SP1"
}
]
},
{
"defaultStatus": "unaffected",
"product": "BC760DC",
"vendor": "Watchfire",
"versions": [
{
"status": "affected",
"version": "12.39"
},
{
"status": "unaffected",
"version": "12.41 SP1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "James Tilson reported the vulnerability to CISA"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The affected\u0026nbsp;Watchfire Controller Software\u0026nbsp;contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller\u0027s built-in web management interface. These keys are embedded in plaintext within the application patch binaries in the firmware directly from Watchfire\u0027s Remote Support filestore."
}
],
"value": "The affected\u00a0Watchfire Controller Software\u00a0contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller\u0027s built-in web management interface. These keys are embedded in plaintext within the application patch binaries in the firmware directly from Watchfire\u0027s Remote Support filestore."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-321",
"description": "CWE-321 Use of hard-coded cryptographic key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-31T20:12:49.282Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-09"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-09.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eWatchfire has applied the required security patch to all affected controllers under its management. Watchfire recommends users verify their controller software version and upgrade to one of the approved versions below, if they are not already on an approved patch level.\u003c/p\u003e\u003cp\u003eWatchfire has issued patches to disable the use of the existing certificate as follows:\u0026nbsp;\u003c/p\u003e\u003cul\u003e\u003cli\u003eBC550 12.30: Patch to 12.31 SP1\u003c/li\u003e\u003cli\u003eBC750 11.33: Patch to 11.34\u003c/li\u003e\u003cli\u003eBC750 12.35: Patch to 12.36 SP1\u003c/li\u003e\u003cli\u003eBC760 12.38: Patch to 12.41 SP1\u003c/li\u003e\u003cli\u003eBC760 13.00: Patch to 14.00 SP1\u003c/li\u003e\u003cli\u003eBC760DC 12.39: Patch to 12.41 SP1\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "Watchfire has applied the required security patch to all affected controllers under its management. Watchfire recommends users verify their controller software version and upgrade to one of the approved versions below, if they are not already on an approved patch level.\n\n\n\nWatchfire has issued patches to disable the use of the existing certificate as follows:\u00a0\n\n * BC550 12.30: Patch to 12.31 SP1\n * BC750 11.33: Patch to 11.34\n * BC750 12.35: Patch to 12.36 SP1\n * BC760 12.38: Patch to 12.41 SP1\n * BC760 13.00: Patch to 14.00 SP1\n * BC760DC 12.39: Patch to 12.41 SP1"
}
],
"source": {
"advisory": "ICSA-26-211-09",
"discovery": "EXTERNAL"
},
"title": "Hard-coded Cryptographic Key in Watchfire Controllers",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-5846",
"datePublished": "2026-07-30T21:12:42.825Z",
"dateReserved": "2026-04-08T18:55:38.436Z",
"dateUpdated": "2026-07-31T20:12:49.282Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-5846 (GCVE-0-2026-5846)
Vulnerability from cvelistv5 – Published: 2026-07-30 21:12 – Updated: 2026-07-31 20:12
VLAI
EPSS
VEX
Title
Hard-coded Cryptographic Key in Watchfire Controllers
Summary
The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management interface. These keys are embedded in plaintext within the application patch binaries in the firmware directly from Watchfire's Remote Support filestore.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-321 - Use of hard-coded cryptographic key
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Watchfire | BC550 |
Affected:
12.30
Unaffected: 12.31 SP1 |
|
| Watchfire | BC750 |
Affected:
11.33
Unaffected: 11.34 Affected: 12.35 Unaffected: 12.36 SP1 |
|
| Watchfire | BC760 |
Affected:
12.38
Unaffected: 12.41 SP1 Affected: 13.00 Unaffected: 14.00 SP1 |
|
| Watchfire | BC760DC |
Affected:
12.39
Unaffected: 12.41 SP1 |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-5846",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-31T15:31:12.383337Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-31T15:31:33.658Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "BC550",
"vendor": "Watchfire",
"versions": [
{
"status": "affected",
"version": "12.30"
},
{
"status": "unaffected",
"version": "12.31 SP1"
}
]
},
{
"defaultStatus": "unaffected",
"product": "BC750",
"vendor": "Watchfire",
"versions": [
{
"status": "affected",
"version": "11.33"
},
{
"status": "unaffected",
"version": "11.34"
},
{
"status": "affected",
"version": "12.35"
},
{
"status": "unaffected",
"version": "12.36 SP1"
}
]
},
{
"defaultStatus": "unaffected",
"product": "BC760",
"vendor": "Watchfire",
"versions": [
{
"status": "affected",
"version": "12.38"
},
{
"status": "unaffected",
"version": "12.41 SP1"
},
{
"status": "affected",
"version": "13.00"
},
{
"status": "unaffected",
"version": "14.00 SP1"
}
]
},
{
"defaultStatus": "unaffected",
"product": "BC760DC",
"vendor": "Watchfire",
"versions": [
{
"status": "affected",
"version": "12.39"
},
{
"status": "unaffected",
"version": "12.41 SP1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "James Tilson reported the vulnerability to CISA"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The affected\u0026nbsp;Watchfire Controller Software\u0026nbsp;contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller\u0027s built-in web management interface. These keys are embedded in plaintext within the application patch binaries in the firmware directly from Watchfire\u0027s Remote Support filestore."
}
],
"value": "The affected\u00a0Watchfire Controller Software\u00a0contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller\u0027s built-in web management interface. These keys are embedded in plaintext within the application patch binaries in the firmware directly from Watchfire\u0027s Remote Support filestore."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-321",
"description": "CWE-321 Use of hard-coded cryptographic key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-31T20:12:49.282Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-09"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-09.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eWatchfire has applied the required security patch to all affected controllers under its management. Watchfire recommends users verify their controller software version and upgrade to one of the approved versions below, if they are not already on an approved patch level.\u003c/p\u003e\u003cp\u003eWatchfire has issued patches to disable the use of the existing certificate as follows:\u0026nbsp;\u003c/p\u003e\u003cul\u003e\u003cli\u003eBC550 12.30: Patch to 12.31 SP1\u003c/li\u003e\u003cli\u003eBC750 11.33: Patch to 11.34\u003c/li\u003e\u003cli\u003eBC750 12.35: Patch to 12.36 SP1\u003c/li\u003e\u003cli\u003eBC760 12.38: Patch to 12.41 SP1\u003c/li\u003e\u003cli\u003eBC760 13.00: Patch to 14.00 SP1\u003c/li\u003e\u003cli\u003eBC760DC 12.39: Patch to 12.41 SP1\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "Watchfire has applied the required security patch to all affected controllers under its management. Watchfire recommends users verify their controller software version and upgrade to one of the approved versions below, if they are not already on an approved patch level.\n\n\n\nWatchfire has issued patches to disable the use of the existing certificate as follows:\u00a0\n\n * BC550 12.30: Patch to 12.31 SP1\n * BC750 11.33: Patch to 11.34\n * BC750 12.35: Patch to 12.36 SP1\n * BC760 12.38: Patch to 12.41 SP1\n * BC760 13.00: Patch to 14.00 SP1\n * BC760DC 12.39: Patch to 12.41 SP1"
}
],
"source": {
"advisory": "ICSA-26-211-09",
"discovery": "EXTERNAL"
},
"title": "Hard-coded Cryptographic Key in Watchfire Controllers",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-5846",
"datePublished": "2026-07-30T21:12:42.825Z",
"dateReserved": "2026-04-08T18:55:38.436Z",
"dateUpdated": "2026-07-31T20:12:49.282Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}