Endress+Hauser MEAC300-FNADE4 Default Credential Vulnerability

A vulnerability exists in the Endress+Hauser MEAC300-FNADE4 product, all firmware versions, due to multiple services reusing the same credentials. This issue can be exploited by a remote, unauthenticated attacker, potentially compromising the application's availability, integrity, and confidentiality.

Impact

The vulnerability allows for unauthorized access to services that require authentication, which could lead to unauthorized actions being performed or sensitive information being accessed or modified.

Remediation

Users are advised to update the Endress+Hauser MEAC300-FNADE4 to the latest version. Consult the Endress+Hauser website or contact their support for guidance on the update process.