title: Neo Information Sys. NIS-HAP11AC remote access and manipulation vulnerability
description: This Vulnerability in NIS-HAP11AC is caused by an exposed external port for the telnet service. Remote attackers use this vulnerability to induce all attacks such as source code hijacking, remote control of the device.
problem types: CWE-284 Improper Access Control
affected:
{
platforms: Windows, Android and etc.
product: Home AP NIS-HAP11AC
vendor: Neo Information Systems Co., Ltd
versions:
status: affected, version: V3.0-B20201117095902
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]