Description
Initialization of a resource with an insecure default vulnerability exists in SD-330AC and AMC Manager provided by silex technology, Inc. When the affected device is connected to the network with the initial (factory-default) configuration, the device can be configured with the null string password.
Scores
CVSS v3
7.5
EPSS
0.0004
EPSS Percentile
11.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-1188
Status
published
Products (4)
silex technology, Inc./AMC Manager
Ver.5.0.2 and earlier
silex technology, Inc./SD-330AC
Ver.1.42 and earlier
silextechnology/amc_manager
< 5.1.0
silextechnology/sd-330ac_firmware
< 1.50
Published
Apr 20, 2026
Tracked Since
Apr 20, 2026