Silex Technology SD-330AC and AMC Manager Missing Authentication Vulnerability

A vulnerability allowing unauthorized modification of device settings has been identified in Silex Technology's SD-330AC model and the AMC Manager application. This issue arises from a missing authentication requirement for critical functions, enabling attackers to alter device configurations without authorization. The vulnerability affects SD-330AC versions through 1.42 and AMC Manager versions through 5.0.2.

Impact

Exploitation of this vulnerability allows for unauthorized changes to the device configuration.

Remediation

Users are advised to update the SD-330AC firmware to version 1.50 or later and AMC Manager to version 5.1.0 or later. After updating, set an administrator password for the web configuration interface to enhance security.