On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack.
The product does not validate, or incorrectly validates, a certificate.
Link | Tags |
---|---|
https://www.2n.cz/en_GB/products/ip-access-control/2n-access-unit-2 | vendor advisory |
https://excellium-services.com/cert-xlm-advisory/cve-2021-31399/ | third party advisory |