CVE-2025-36535 — AutomationDirect MB-Gateway Missing Authentication for Critical Function
The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, or arbit…
Published: 2025-05-21 · CVSS: 10.0 · CVSS 4.0
The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, or arbitrary code execution depending on the environment and exposed functionality.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7