Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8.
The vulnerability results from improper authentication implementation (CWE-287), lack of authentication requirement for critical functions (CWE-306), and weak identity verification mechanisms (CWE-1390). An attacker can remotely access device functions that should be protected by access control lists (ACL) without possessing an account or any form of authentication. The vulnerability is exploitable over the network without user interaction and without required privileges.
An attacker can take control of the device, gaining full access to protected administrative functions, leading to a breach of confidentiality, integrity, and system availability.
The Redline WR3200 device firmware should be updated to version 7.1.8 or newer. Until the patch is applied, it is recommended to restrict access to the device management interface exclusively to trusted networks or hosts (e.g., through firewall or network segmentation).
DTS Electronics Redline WR3200 in versions from 7.1.3 (inclusive) to 7.1.8 (exclusive).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H