This vulnerability affects UGREEN CM933 version 1.1.59.4319 and involves missing authentication in an unspecified function of the administrative interface. An attacker on the local network could exploit this to bypass authentication controls. The vendor has acknowledged the issue and is developing a fix expected in a forthcoming release planned for late April. No patch or temporary fix is currently available, and no known exploits are reported in the wild.

The vulnerability allows an attacker with local network access to bypass authentication on the administrative interface of the affected device. This could potentially lead to unauthorized administrative actions. However, exploitation requires local network presence, limiting the attack surface. No known active exploits have been reported.

The vendor has confirmed the vulnerability and is working on a fix scheduled for release in late April. Until the patch is released, users should restrict local network access to the device's administrative interface to trusted users only. Monitor vendor communications for the official update and apply it promptly once available. Patch status is not yet confirmed; check the vendor advisory for current remediation guidance.