Executive Summary

This vulnerability exists in ProSoft Technology ICX35-HWC version 1.3 and earlier cellular gateways. It is an authentication bypass flaw in the web user interface that allows attackers who are not authenticated to gain access to administrative functions without needing valid credentials.

By exploiting this vulnerability, attackers can bypass the authentication mechanism and obtain full administrative access to the device's configuration and settings.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is severe because it allows unauthenticated attackers to gain full administrative access to the affected device.

• Attackers can change device configurations and settings.
• Unauthorized access could lead to compromise of network security.
• Potential disruption of device operation or misuse of the device for malicious purposes.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows unauthenticated attackers to gain full administrative access to device configuration and settings by bypassing authentication mechanisms. This unauthorized access could lead to exposure or manipulation of sensitive data, potentially violating data protection requirements under standards like GDPR and HIPAA.

Such a security flaw undermines the confidentiality and integrity of data managed by the device, which are core principles in many compliance frameworks. Organizations using affected devices may face increased risk of non-compliance due to inadequate access controls.

Useful 0 Not Useful 0