Описание
Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.
Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2025-52689
- https://blog.uhg.sg/article/24.html
- https://github.com/UltimateHG/CVE-2025-52689-PoC
- https://www.al-enterprise.com/-/media/assets/internet/documents/sa-n0150-omniaccess-stellar-multiple-vulnerabilities.pdf
- https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072
Связанные уязвимости
Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.