Hard-Coded Keys and Open Doors: Critical Flaws Found in PrismX AP Controllers

A trio of vulnerabilities has been discovered in Browan Communications’ PrismX MX100 AP Controller, with the most severe effectively leaving the digital keys under the doormat. According to TWCERT/CC, unpatched controllers are wide open to remote attacks due to hard-coded credentials and command-injection flaws.

The headline issue, CVE-2026-1221, carries a critical CVSS score of 9.8 and stems from hard-coded credentials embedded in the firmware, which allows an unauthenticated remote attacker to log in to the database. In addition, two OS Command Injection flaws—CVE-2026-1222 (CVSS 7.2) in the diagnostic function and CVE-2026-1223 (CVSS 4.9) in the network_check function—require authentication and root privileges to exploit.

The vulnerabilities affect all PrismX MX100 AP controllers running firmware versions prior to 1.03.23.01, and Browan Communications has released a patch to address them, advising administrators to update to version 1.03.23.01 or later to remove the hard-coded credentials and secure the command injection points.