Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.
CWE-1390