A critical authentication bypass vulnerability in EVMAPA WebSocket endpoints enables unauthorized access and potential system-wide compromise.

The application fails to enforce authentication mechanisms on its WebSocket endpoints, allowing unauthenticated attackers to establish connections and interact with restricted functions.

The lack of authentication on critical WebSocket communications allows attackers to perform unauthorized actions or exfiltrate sensitive data, potentially leading to full system compromise. With a CVSS score of 9.4, this vulnerability represents a severe threat to the integrity and confidentiality of the affected environment.

Immediate Action: Refer to ICSA-26-022-08 for vendor guidance regarding available patches or configuration hardening steps to enforce authentication.

Proactive Monitoring: Monitor WebSocket traffic for unauthorized connection attempts or anomalous data exchange patterns that deviate from standard operational baselines.

Compensating Controls: Utilize a reverse proxy or WAF to intercept WebSocket traffic and enforce authentication at the network edge before requests reach the EVMAPA application.

Public Exploit Available: No (Exploit available: unknown)

Organizations utilizing EVMAPA must prioritize the implementation of authentication controls or the application of vendor-supplied patches. Until a fix is applied, restricting network access to the affected endpoints is essential to mitigate the risk of unauthorized exploitation.