A design flaw in MRV’s In-Reach console servers versions LX-8000, 4000, and 1000 series allow users to bypass port access controls when ssh public-key authentication is enabled.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38761/mrvConsole.txt
Source: https://packetstormsecurity.com/files/38761/mrvConsole.txt.html