Carlson Software VASCO-B GNSS Receiver Missing Authentication for Critical Function

A vulnerability exists in the Carlson VASCO-B GNSS Receiver versions prior to 1.4.0, due to the absence of an authentication mechanism. This flaw allows an attacker with network access to directly access and modify the receiver's configuration and operational functions without needing credentials. Successful exploitation could alter critical system functions or disrupt device operation.

Impact

Exploitation of this vulnerability could enable a remote attacker to alter critical system functions or disrupt device operation.

Remediation

Carlson Software recommends users update to Version 1.4.0 or greater. For more information, contact Carlson Software through their support and training page.