The Carlson VASCO-B GNSS Receiver contains a critical security vulnerability where it lacks any authentication mechanism. This allows attackers with network access to directly access and modify the device's configuration and operational functions without requiring any credentials. The vulnerability affects GNSS receivers used in surveying and positioning applications, potentially allowing unauthorized control of critical positioning equipment. This represents a significant security flaw in industrial and surveying equipment that could be exploited remotely.