Interinfo DreamMaker - Missing Authentication for Critical Function

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication.

設定網路防火牆、負載平衡器或存取控制清單 (ACL)，限制對受影響端點 /servlet/baServer3 的存取。應完全阻擋來自外部網路的連線，並僅允許受信任的內部管理 IP 位址進行存取。 （Configure network firewalls, load balancers, or Access Control Lists (ACLs) to restrict access to the affected endpoint /servlet/baServer3.