Description
MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key authentication, does not properly restrict access to ports, which allows remote authenticated users to access the consoles of other users.
References
- 14300 vdb-entry
- 20050718 MRV In-Reach console server: Port Access Control Bypass Vulnerability mailing-list
- 1014517 vdb-entry