JNC IAQS and I6 Missing Authentication Vulnerability Allowing Unauthenticated Access to Administrative Functions

A missing authentication vulnerability has been identified in JNC's IAQS and I6 products. This vulnerability allows unauthenticated remote attackers to directly access and operate system administrative functions. The issue arises from a lack of proper authentication mechanisms, enabling unauthorized users to manipulate administrative features remotely.

Impact

Exploitation of this vulnerability allows for unauthorized access to system administrative functionalities, potentially leading to unauthorized changes or management of the system.

Remediation

JNC has released a patch for devices using the M4 chip. However, devices with the M3 chip do not support the update and are recommended to be replaced. Users should contact the vendor to confirm which chip their device uses and take appropriate action.