RISS SRL MOMA Seismic Station Missing Authentication Vulnerability Allowing Unauthenticated Access to Web Management Interface

A vulnerability exists in RISS SRL MOMA Seismic Station versions through 2.4.2520, where the web management interface is exposed without authentication. This flaw could enable an unauthenticated attacker to modify configuration settings, access device data, or remotely reset the device. Successful exploitation may also lead to a denial-of-service condition.

Impact

Exploitation of this vulnerability could result in unauthorized modification of device settings, unauthorized access to device data, or unauthorized remote resets of the device.

Remediation

RISS SRL did not respond to CISA's request for coordination. Users of RISS MOMA Seismic Station are encouraged to contact RISS SRL for more information.