CVE-2026-82784
MediumCVSS 6.5Summary
A missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. An attacker may execute a REST API without authentication, which could allow the attacker to retrieve I/O values and/or control the output.
Risk Assessment
An unauthorized attacker could read and control I/O signals, potentially leading to manipulation of industrial processes. This may cause serious physical or operational damage.
Recommendation
Update CPSN-MCB271-* device software to a version containing the authentication fix. Restrict access to the REST API and enforce strong authentication.
Other vulnerabilities in Remote I/O Coupler Unit CPSN-MCB271-*
See all- CVE-2026-82786Medium
An insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. If this vulnerability is exploited, sensitive information may be restored from a backup file.
- CVE-2026-82785Medium
A stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) condition.
Original NVD description (English source)
Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. An attacker may execute a REST API without authentication, which could allow the attacker to retrieve I/O values and/or control the output.