Auth bypass in Elvaco M-Bus Metering Gateway Cme3100

CVE-2024-49399

The affected product is vulnerable to an attacker being able to use commands without providing a password which may allow an attacker to leak information.

Vulnerability class: Broken Authentication

EPSS: 0.004 (31.4th percentile) — read the EPSS interpretation.