EntryPass N5200 Active Network Control Panel does not properly restrict access, which allows remote attackers to obtain the administrator username and password, and possibly other sensitive information, via a request to /4.
EntryPass N5200 Active Network Control Panels allow the unauthenticated downloading of information that includes the current administrative username and password.