CISA flags 13 flaws in Ebyte NA111-M firmware in Aug. 27 advisory

By Atlas Watchline Staff · Regulatory · August 27, 2026

CISA issued an ICS advisory on Aug. 27 for Ebyte NA111-M Firmware 9013-2-17, saying 13 vulnerabilities could let an attacker fully compromise the device.

CISA issued an ICS advisory on Aug. 27 for Ebyte NA111-M Firmware 9013-2-17, saying 13 vulnerabilities could let an attacker fully compromise the device.

The advisory covers Ebyte NA111-M Firmware 9013-2-17 and lists 13 CVEs affecting the product. CISA said successful exploitation could allow an attacker to fully compromise the device. The advisory also says the affected product is deployed worldwide, the company headquarters location is China, and the critical infrastructure sector is Information Technology.

CISA said some of the flaws could let an unauthorized attacker access sensitive configuration data, modify settings, impersonate users or disrupt availability. Other issues require a low-privilege authenticated attacker or an adjacent-network attacker. CISA said no known public exploitation specifically targeting these vulnerabilities had been reported at the time of publication.

CISA identified these CVEs in the advisory: CVE-2026-73125, CVE-2026-76179, CVE-2026-75814, CVE-2026-76940, CVE-2026-77966, CVE-2026-73809, CVE-2026-71187, CVE-2026-75548, CVE-2026-69658, CVE-2026-76133, CVE-2026-73819, CVE-2026-77975 and CVE-2026-77977.

According to the advisory, the weaknesses include missing authentication for critical functions, use of sensitive data in GET query strings, cross-site request forgery, excessive authentication attempts without rate limiting or lockout, missing authorization, cleartext transmission of sensitive information, client-side authentication, frame-rendering protection weaknesses, a risky cryptographic algorithm, weak authentication and cleartext storage of sensitive information.

CISA’s remediation section says Ebyte acknowledged receipt of the reported vulnerabilities and said a patch was under development. The agency said the vendor did not respond to later coordination requests and that CISA had not been informed of patch status or availability. CISA advises users to contact Ebyte for more information.

The advisory also recommends minimizing network exposure, placing control system networks behind firewalls, using VPNs where needed, performing impact analysis and risk assessment, following ICS recommended practices and reporting suspected malicious activity to CISA.

The advisory credits Jithin Nambiar J as the reporter to CISA. The advisory’s initial release date is Aug. 27, 2026, and the revision history shows initial publication on the same date.

Sources

• CISA Cybersecurity Advisories

Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.

This is the AMP version of the article. Read the full article on Atlas Watchline.