ATEN Unizon’s RpcProvider lacks authentication checks, enabling a remote attacker to trigger a denial‑of‑service condition on the system. The flaw allows the attacker to repeatedly invoke RPC functions without prior authentication, exhausting resources or locking critical services. This leads to loss of availability for users of the affected device.

The vulnerable component is found in ATEN Unizon devices. No specific firmware or software versions are listed, so any installation that includes the RpcProvider class is potentially affected. The vulnerability is not limited to a particular model and could exist across the product line.

With a CVSS score of 7.5, the vulnerability is considered high severity. The EPSS score of less than 1 % suggests that exploit attempts are unlikely but possible, and the issue is not yet listed in CISA’s KEV catalog. Attackers can reach the vulnerable RPC service from any network that can contact the device, making authentication bypass a critical factor in exploitation. The DoS impact is local to the device, but compromise can disrupt operational workflows.