CVE-2017-14003
CriticalSummary
An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.01.00/29.03.2007 and prior versions. Exploiting this vulnerability allows an attacker with the same IP address to bypass authentication by accessing a specific URL.
Risk Assessment
The organization is at risk of unauthorized access to the system, which could lead to serious data security consequences.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability and implement additional security measures such as IP address filtering.
Original NVD description (English source)
An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.01.00/29.03.2007 and prior versions. An improper authentication vulnerability has been identified, which, if exploited, would allow an attacker with the same IP address to bypass authentication by accessing a specific uniform resource locator.