Radiflow iSAP Smart Collector Unauthenticated Configuration Access and Modification Vulnerability

A vulnerability exists in the Radiflow iSAP Smart Collector running on CentOS 7 with VSAP 1.20, allowing an unauthenticated user with management network access to retrieve and alter the device's configuration. This issue arises from two web servers that expose unauthenticated REST APIs on the management network via TCP ports 8084 and 8086. Exploitation of this vulnerability enables access to all system settings, modification of the configuration, and execution of certain commands, such as rebooting the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access and modification of the device's configuration, potentially allowing for disruptive actions like rebooting the system.