MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key authentication, does not properly restrict access to ports, which allows remote authenticated users to access the consoles of other users.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| In_reach_lx_1000s | Mrv_communications | 3.5 (including) | 3.5 (including) |
| In_reach_lx_4000s | Mrv_communications | 3.5 (including) | 3.5 (including) |
| In_reach_lx_8000s | Mrv_communications | 3.5 (including) | 3.5 (including) |