Description (CNA)
DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rich Source / DMS+ (Non-Mobile) | affected 0 through 5.63 |
CWE
CWE-798
References
- https://www.twcert.org.tw/tw/cp-132-11072-3a4d4-1.html
- https://www.twcert.org.tw/en/cp-139-11073-de184-2.html
ADP enrichment
No English description supplied.
No references supplied.