CVE-2026-3893: CVE-2026-3893: kritik işlevde kimlik doğrulaması eksik

Açıklama (NVD)

The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and operational functions without needing credentials.

Özet bilgiler

CVSS v3.1

9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

EPSS

%0,37 (yüzdelik 31)

CWE

CWE-306

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• www.carlsonsw.com
• www.cve.org
• CWE-306