Description
Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. An attacker may execute a REST API without authentication, which could allow the attacker to retrieve I/O values and/or control the output.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Contec Co., Ltd. Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*
Default version status: unaffected
0 to < 1.82affected