Description


TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By leveraging port forwarding, an attacker can interact with locally bound ports and services, resulting in unauthorized access to sensitive functionality and confidential information, and causing availability impact.

Related CPE's


Could not find any relations

Weaknesses



CWE-923

CVSS impact metrics


CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

7.7 · High

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-27T12:17:04.843Z

6 hours ago

Last modified

2026-10-27T15:00:49.240Z

3 hours ago