The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentication Bypass
Utc Fire Security Ge Mc100 Ntp Gps Zb Master Clock Device
NVD
CVSS 2.0
10.0
EPSS
1.3%