EUVD-2025-36691

Incorrect access control on Dataphone A920 v2025.07.161103 exposes a service on port 8888 by default on the local network without authentication. This allows an attacker to interact with the device via a TCP socket without credentials. Additionally, sending an HTTP request to the service on port...

CVE-2025-61234

The Dataphone A920 (version v2025.07.161103 ) is affected by an incorrect access control vulnerability that exposes a service on port 8888 on the local network without authentication. This flaw allows an attacker to interact with the device via a TCP socket without providing credentials. Furtherm...