← Terug naar CVE-database
Beschrijving
The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.
Affected products
Tex30lcd/s Firmware
Tex30lcd/s
Tex50lcd/s Firmware
Tex50lcd/s
Tex100lcd/s Firmware
Tex100lcd/s
Tex150lcd/s Firmware
Tex150lcd/s
Tex300lcd Firmware
Tex300lcd
Tex502lcd Firmware
Tex502lcd
Tex702lcd Firmware
Tex702lcd
Tex3500lcd Firmware
Tex3500lcd
Tex1002lcd Firmware
Tex1002lcd
Tex2000light Firmware
Tex2000light
Tex2500lcd Firmware
Tex2500lcd