CVE-2021-25909

ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated, remote attacker to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending specific packets to the port 7919...

CVE-2021-25910

The CVE-2021-25910 entry involves ZIV AUTOMATION 4CCT-EA6-334126BF with an improper authentication flaw in the cookie parameter. This allows a local attacker, as an authenticated user, to modify several device parameters (impacting integrity). The primary affected component is the cookie handling...