CVE-2018-20220

Name of the Vulnerable Software and Affected Versions: Teracue ENC-400 devices with firmware 2.56 and below

Description: An issue was discovered where a large portion of the HTTP endpoints are missing authentication, allowing an attacker to view these pages before being authenticated. Some of these pages may disclose sensitive information.

Recommendations: For Teracue ENC-400 devices with firmware 2.56 and below, consider restricting access to the web interface until a fix is available. As a temporary workaround, limit access to sensitive information by implementing additional authentication measures for the affected HTTP endpoints.