CVE:CVE-2021-26637
CNNVD:CNNVD-202206-2287
SiHAS firmware / old app是韩国SiHAS公司的一种固件。
SiHAS 的 SGW-300、ACM-300、GCM-300存在安全漏洞，该漏洞源于现有应用程序中没有账户认证和权限检查逻辑。攻击者利用该漏洞可以远程控制设备。
solution:Upgrade shinasys sihas_sgw-300_firmware to a higher version than -; Upgrade shinasys sihas_acm-300_firmware to a higher version than -; Upgrade shinasys sihas_gcm-300_firmware to a higher version than -