Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-26637

SiHAS Improper Authentication vulnerability

Description

There is no account authentication and permission check logic in the firmware and existing apps of SiHAS's SGW-300, ACM-300, GCM-300, so unauthorized users can remotely control the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Shina System Co.,Ltd SiHAS firmware

  • 1.xxaffected

Shina System Co.,Ltd SiHAS old app

  • old appaffected

References