CVE-2021-26637: Shinasys Sihas Acm-300 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

There is no account authentication and permission check logic in the firmware and existing apps of SiHAS's SGW-300, ACM-300, GCM-300, so unauthorized users can remotely control the device.

Affected products

• Shinasys Sihas Acm-300 Firmware: affected versions not specified
• Shinasys Sihas Gcm-300 Firmware: affected versions not specified
• Shinasys Sihas Sgw-300 Firmware: affected versions not specified

Published 2022-06-23. Last modified 2026-06-17.