Skip to content
OpenAdvisories

Vendor

SPH Engineering

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    UgCS server HCI authentication bypass with empty credentials

    UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains exactly one user (the default single-operator installation), a LoginRequest with empty userLogi…