A critical lack of authentication in the Packet Power Monitoring and Control Web Interface permits unauthenticated users to access and manipulate sensitive infrastructure data.

The application fails to enforce authentication mechanisms for its web-based management interface. This design flaw allows any unauthenticated network actor to access, view, and potentially modify configurations or monitoring data.

This vulnerability presents a severe risk to operational visibility and control. With a CVSS score of 9.8, an attacker could manipulate monitoring outputs, potentially hiding malicious activity or causing physical infrastructure misconfiguration. Unauthorized access to these interfaces can lead to significant operational disruptions and loss of system integrity.

Immediate Action: Consult the vendor advisory for the latest firmware or software patches that implement mandatory authentication for the web interface.

Proactive Monitoring: Monitor access logs for the web interface for any unauthorized login attempts or requests from unexpected IP addresses.

Compensating Controls: Place the device management interface behind a VPN or within a restricted management VLAN that is not accessible from the general corporate network or the public internet.

Public Exploit Available: Unknown

Immediate remediation is required to secure the device interface. Organizations must ensure that access to the monitoring and control interface is restricted via network-level controls until the vendor-provided authentication patch is applied.