Description (CNA)
R Radio Network FM Transmitter 1.07 allows unauthenticated attackers to access the admin user's password through the system.cgi endpoint, enabling authentication bypass and FM station setup access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| R Radio Network / Radio Network FM Transmitter | affected 1.07 before 1.09 |
CWE
CWE-312
References
- https://www.exploit-db.com/exploits/51855
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5802.php
- https://www.vulncheck.com/advisories/r-radio-network-fm-transmitter-107-system-settings-disclosure
ADP enrichment
No English description supplied.
No references supplied.