VULNERABILITY INTELLIGENCE

CVE-2021-26637

CVSS score9.8 CRITICAL
EPSS probability1.92%
CISA KEVNot currently listed
Published2022-06-23
Last modified2026-06-17

Description

There is no account authentication and permission check logic in the firmware and existing apps of SiHAS's SGW-300, ACM-300, GCM-300, so unauthorized users can remotely control the device.

Primary references