The iRM-IEI Remote Management system developed by IEI Integration Corp contains a hard-coded credentials vulnerability (CWE-798) in the iRM-TSi410X product. This vulnerability permits unauthenticated remote attackers to leverage embedded credentials to obtain administrative access to the underlying database. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed as of the publication date.

Successful exploitation results in unauthorized administrative access to the database, potentially allowing attackers to fully control, modify, or disrupt database operations. This compromises confidentiality, integrity, and availability of the system data managed by iRM-TSi410X.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the affected system and monitor for unauthorized access attempts. Avoid exposing the iRM-TSi410X management interface to untrusted networks.