EUVD-2026-63349
GHSA-v77m-pgr8-9w4g
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Missing authentication on a network-reachable critical function gives PR:N/AC:L/AV:N with no user interaction, yielding full C/I/A compromise of the management application.
Primary rating from Vendor (TR-CERT).
CVSS VectorVendor: TR-CERT
Lifecycle Timeline
2DescriptionCVE.org
Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentication Bypass.
This issue affects Baylan Smart Meter Management Application (BMS): before v1.1.10.142.
AnalysisAI
Authentication bypass in Baylan Smart Meter Management Application (BMS) before v1.1.10.142 lets remote unauthenticated attackers reach a critical function that lacks any authentication check (CWE-306), granting full control over smart-meter management operations. The flaw was reported by Turkey's national CSIRT (TR-CERT/USOM) and carries a CVSS 9.8, reflecting network-reachable, no-privilege access with high confidentiality, integrity, and availability impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special authentication or interaction conditions per the CVSS vector (AV:N/AC:L/PR:N/UI:N) - a remote attacker who can reach the BMS management interface can invoke the critical function without credentials. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) describes the worst-case profile for exploitability: network vector, low complexity, no privileges, and no user interaction, with total impact on all three security properties - an authentication bypass that is trivially automatable if the management interface is internet-exposed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: v1.1.10.142 - upgrade all BMS installations to v1.1.10.142 or later, which is the version boundary where the affected range ends. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all BMS instances and immediately implement network isolation through firewall rules, segmentation, and IP whitelisting to restrict access to trusted administrative networks only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today