CVE-2021-38457

The server permits communication without any authentication procedure, allowing the attacker to initiate a session with the server without providing any form of authentication.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2021-10-22

Last modified

2024-09-16

Weaknesses

CWE-284, CWE-306

Affected products

• Versiondog (Auvesy)

References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01