CVE-2023-22906: Heroelectronix Qubo HCD01 Firmware

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Hero Qubo HCD01_02_V1.38_20220125 devices allow TELNET access with root privileges by default, without a password.

Affected products

• Heroelectronix Qubo HCD01 Firmware: version 1.38_20220125 only
• Heroelectronix Qubo HCD02 Firmware: version 1.38_20220125 only

Published 2023-07-04. Last modified 2026-06-17.