The vulnerability of the Eltex ECCM monitoring and control system arises from incorrect configuration of the server authentication for SFTP/SCP protocols. This allows attackers to gain unauthorized access to temporary configuration files and device software using an arbitrary public SSH key.

The vulnerability of the Eltex ECCM monitoring and configuration management system is related to incorrect authentication policies on the SFTP/SCP server. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to temporary configuration files and device software using ...