← volver
CVE-2025-36535

AutomationDirect MB-Gateway Missing Authentication for Critical Function

CVSS 10 CRITICALEPSS 1.0%CWE-306
The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, or arbitrary code execution depending on the environment and exposed functionality.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →