Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-3893

Carlson Software VASCO-B GNSS Receiver Missing Authentication for Critical Function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and operational functions without needing credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Carlson Software VASCO-B GNSS Receiver

Default version status: unaffected

  • 0 to < 1.4.0affected
  • 1.4.0unaffected

References