What’s Vulnerable › Vulnerabilities

CVE-2020-25746

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-17 · updated 2026-06-17
• Weakness: CWE-200

Description

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obtain sensitive information via the debug interface (keystrokes over a USB cable), aka wireless password visibility.

Affected products

• Resourcexpress Qubi3 Firmware: before 1.40.9 — fixed in 1.40.9

How to fix

Upgrade to a fixed version: Resourcexpress Qubi3 Firmware 1.40.9. Check the vendor advisory for mitigations.

References

• https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/878641153/v1.40.9
• https://www.resourcexpress.com/meeting-room-booking-systems/hardware/qubi3/
• https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/878641153/v1.40.9
• https://www.resourcexpress.com/meeting-room-booking-systems/hardware/qubi3/

Get alerted when CVE-2020-25746 or the next vulnerability affects your stack