Iskra iHUB and iHUB Lite has a Missing Authentication for Critical Function vulnerabilitiy
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.3epss 0.6%
exploitation probability
0.6%top 51% of all CVEs
observed exploitation
nono source reports it
The Iskra iHUB and iHUB Lite smart metering gateway exposes its web management interface without requiring authentication, allowing unauthenticated users to access and modify critical device settings.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Iskra · iHUB and iHUB Lite