smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information.Referenceshttps://www.twcert.org.tw/tw/cp-132-6567-01fa3-1.html