Kev Breen

**Name of the Vulnerable Software and Affected Versions** UNI-NMS-Lite (affected versions not specified) **Description** The issue allows an unauthenticated attacker to read or manipulate device data through a command injection attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UNI-NMS-Lite (affected versions not specified) **Description** The issue concerns the use of hard-coded credentials in UNI-NMS-Lite, which could allow an unauthenticated attacker to gain administrative privileges to all UNI-NMS managed devices. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UNI-NMS-Lite (affected versions not specified) **Description** The issue concerns the use of hard-coded credentials in UNI-NMS-Lite, which could allow an unauthenticated attacker to read, manipulate, and create entries in the managed database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WGS-80HPT-V2 (affected versions not specified) WGS-4215-8T2S (affected versions not specified) **Description** The issue is a command injection attack that could allow an unauthenticated attacker to execute OS commands on the host system. **Recommendations** For WGS-80HPT-V2, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For WGS-4215-8T2S, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WGS-80HPT-V2 (affected versions not specified) WGS-4215-8T2S (affected versions not specified) **Description** The issue is related to missing authentication in the affected devices, which could allow an attacker to create an administrator account without knowing any existing credentials. This could potentially lead to unauthorized access and control of the devices. **Recommendations** For WGS-80HPT-V2, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For WGS-4215-8T2S, at the moment, there is no information about a newer version that contains a fix for this vulnerability.