Successful exploitation of this vulnerability could allow attackers to manipulate critical device settings and repeatedly disrupt operations, potentially causing a loss of communications to the device.
The following versions of Hubbell Aclara Metrum Cellular Web Interface are affected:
Aclara Metrum Cellular Web Interface
Vendor
Equipment
Hubbell
Hubbell Aclara Metrum Cellular Web Interface
Missing Authentication for Critical Function
Critical Infrastructure Sectors: Energy
Countries/Areas Deployed: United States
Company Headquarters Location: United States
The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the absence of authentication controls on critical system functions. This weakness exposes essential configuration settings, allowing attackers to alter operational parameters and trigger system restarts without restriction. Such unautho...