Description
Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. An attacker may execute a REST API without authentication, which could allow the attacker to retrieve I/O values and/or control the output.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Contec | Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* | < 1.82 | 1.82 |