The vulnerability in Silex Technology's AMC Manager and SD-330AC allows an attacker to authenticate to the device without knowing the correct password by sending a specially crafted packet. This bypass results in unauthorized access, enabling the attacker to control the device's configuration and settings. The weakness is a flaw in resource handling where sensitive data is not removed before reuse, a classic instance of CWE-226.

Silex Technology, Inc. provides AMC Manager and SD-330AC. No specific firmware or hardware revision is mentioned, and version details are not supplied. The products are affected by the flaw regardless of any particular sub-version, so all deployments using these devices should consider themselves potentially vulnerable.

With a CVSS score of 7.1, this vulnerability is of medium‑to‑high severity. The EPSS score is not available, and the flaw is not listed in the CISA KEV catalog. Attackers can exploit the issue remotely over the network by sending a crafted packet to the device, making the vulnerability potentially reachable in environments with exposed management interfaces.