DuraComm SPM-500 DP-10iN-100-MU Missing Authentication Vulnerability Allowing Unauthorized Reboots

A vulnerability exists in the DuraComm SPM-500 DP-10iN-100-MU power distribution panel, all versions through 4.10. The issue arises from a lack of access controls for a function that should require user authentication, potentially allowing an attacker to repeatedly reboot the device. Additionally, the product transmits sensitive information in cleartext over unencrypted channels, which could be intercepted by attackers.

Impact

Exploitation of this vulnerability could lead to unauthorized reboots of the device, causing a denial-of-service condition.

Remediation

Users are advised to update to Version 4.10A. Contact DuraComm to obtain the update.