Description (CNA)
Axiros AXESS Auto Configuration Server (ACS) 4.x and 5.0.0 is affected by an Incorrect Access Control vulnerability. An authorization bypass allows remote attackers to achieve unauthenticated remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.axiros.com/2024/03/vulnerability-in-axusermanager
- https://www.nsideattacklogic.de/advisories/NSIDE-SA-2024-002
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.