ProSoft Technology ICX35-HWC Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the web user interface of ProSoft Technology ICX35-HWC cellular gateways, in all versions through 1.3. This vulnerability allows unauthenticated attackers to access administrative functions without valid credentials, enabling full administrative control over the device's configuration and settings.

Impact

Exploitation of this vulnerability allows unauthorized users to gain full administrative access to the affected device's configuration and settings.

Remediation

Users are advised to update the firmware on all ICX35 gateways to version 1.3 or later. The firmware can be updated through ProSoft Connect or by downloading the firmware files from the Downloads section of the ICX35 product web page.