An insecure default configuration in Silex’s SD-330AC and AMC Manager allows a device connected with its factory‑default settings to be authenticated using a null (blank) password. If an attacker can reach the device over the network, this flaw gives them unrestricted administrative access, enabling configuration changes or further compromise of the network segment it serves.

The vulnerability affects all installations of the SD-330AC switch and the AMC Manager management software produced by Silex technology, Inc. No specific firmware or software versions are listed here, so any unit using the factory‑default credentials is potentially vulnerable.

The CVSS score of 8.7 indicates a high severity risk. EPSS is not available and the vulnerability is not listed in CISA’s KEV catalog, suggesting that large‑scale exploitation has not been widely observed yet. The likely attack vector is a networking attack originating from an internal or remote source that can contact the device before it is secured. An adversary exploiting this flaw could gain full administrative rights and potentially further compromise other devices on the same network.