CVE-2019-17215

CVE-2019-17215 describes a critical authentication bypass vulnerability affecting V-Zug Combi-Steam MSLQ devices running firmware versions before Ethernet R07 and WLAN R05. The absence of brute-force protection allows an unauthenticated attacker to repeatedly guess passwords until successful. This vulnerability carries a CVSS score of 9.8 (Critical) due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or active exploitation have been identified, and community discussion is minimal, the inherent risk remains high due to the ease of exploitation.