CVE-2020-25746: Resourcexpress QUBI3 Firmware

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obtain sensitive information via the debug interface (keystrokes over a USB cable), aka wireless password visibility.

Affected products

• Resourcexpress QUBI3 Firmware: before 1.40.9 (fixed in 1.40.9)

Published 2020-11-17. Last modified 2026-06-17.