Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
CWE-1390