There is a vulnerability in the current version of FlexWATCH that allows an attacker to access administrative sections without being required to authenticate. An attacker may use this flaw to gain the list of user accounts on this system and the ability to reconfigure this service. This is done by adding an additional '/' at the begining of the URL.

None at this time - filter incoming traffic to this port