Auth bypass in Emta Grup Pdks

CVE-2024-0336

Missing Authentication for Critical Function vulnerability in EMTA Grup PDKS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDKS: from V3.04 before 20240603. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability class: Broken Authentication

EPSS: 0.004 (31.3th percentile) — read the EPSS interpretation.