TI-2021-08354 CVE-2021-26637 · GHSA-4j8v-2qmr-6m8pSiHAS Improper Authentication vulnerabilityPriority MEDIUM 46There is no account authentication and permission check logic in the firmware and existing apps of SiHAS's SGW-300, ACM-300, GCM-300, so unauthorized users can remotely control the device.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01915 · Published 2022-06-22 · No fix listed CWE-287