Описание
The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web management interface. The login page does not properly enforce session validation, allowing attackers to bypass authentication by directly accessing restricted web application endpoints through forced browsing
Ссылки
EPSS
Процентиль: 30%
0.00369
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-285
Связанные уязвимости
CVSS3: 9.8
github
6 месяцев назад
The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web management interface. The login page does not properly enforce session validation, allowing attackers to bypass authentication by directly accessing restricted web application endpoints through forced browsing
EPSS
Процентиль: 30%
0.00369
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-285