CVE-2025-27847 | ESPEC North America Web Controller 3 up to 3.3.7 /api/v4/auth/ privilege escalation

A vulnerability, which was classified as problematic, was found in ESPEC North America Web Controller 3 up to 3.3.7. This affects an unknown part of the file /api/v4/auth/. The manipulation leads to privilege escalation.

This vulnerability is uniquely identified as CVE-2025-27847. The attack needs to be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.