CVE-2023-43742

CVE-2023-43742 is a critical authentication bypass vulnerability affecting Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 devices with specific firmware versions. An unauthenticated attacker can exploit a flaw in the authentication process to gain an administrative session, even after a failed login attempt. This vulnerability carries a CVSS score of 9.8 (Critical) due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the potential for complete system compromise necessitates immediate patching.