CVE-2021-26637

There is no account authentication and permission check logic in the firmware and existing apps of SiHAS's SGW-300, ACM-300, GCM-300, so unauthorized users can remotely control the device...

CVE-2021-26637

CVE-2021-26637 affects SiHAS SGW-300, ACM-300, and GCM-300 firmware/apps, due to missing account authentication and permission checks. This enables unauthorized users to remotely control the device over the network; no specific exploit details are provided in the documents. PT-2022-9785 reiterate...

CVE-2021-26637: Improper Authentication

There is no account authentication and permission check logic in the firmware and existing apps of SiHAS's SGW-300, ACM-300, GCM-300, so unauthorized users can remotely control the device...