A vulnerability in MEPSANs USC+ before version 3.0 has a weakness in login function which lets attackers to generate high privileged accounts passwords.
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Stawiz_usc++ | Mepsan | * | 3.0 (excluding) |