Payrange Api
Monthly
Unauthenticated access to PayRange API management endpoints exposes verbose device details for every device on the PayRange network, exploitable with or without a registered account. Classified under CWE-862 (Missing Authorization) and reported by CISA ICS-CERT as advisory ICSA-26-237-04, the flaw affects all tracked versions of the PayRange API with a CVSS 4.0 score of 8.7 reflecting high impact across confidentiality, integrity, and availability. No public exploit has been identified at time of analysis, though the network-accessible nature and low attack complexity make this a low-effort target for reconnaissance against PayRange-managed payment infrastructure.
Unauthenticated access to PayRange API management endpoints exposes verbose device details for every device on the PayRange network, exploitable with or without a registered account. Classified under CWE-862 (Missing Authorization) and reported by CISA ICS-CERT as advisory ICSA-26-237-04, the flaw affects all tracked versions of the PayRange API with a CVSS 4.0 score of 8.7 reflecting high impact across confidentiality, integrity, and availability. No public exploit has been identified at time of analysis, though the network-accessible nature and low attack complexity make this a low-effort target for reconnaissance against PayRange-managed payment infrastructure.