Advertisement






Aigital Wireless-N Repeater Mini_Router.0.131229 Authentication Bypass

CVE Category Price Severity
N/A CWE-287 N/A High
Author Risk Exploitation Type Date
N/A High Remote 2023-05-03
CVSS
CVSS:4.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS vector description

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2023050006

Below is a copy:

Aigital Wireless-N Repeater Mini_Router.0.131229 Authentication Bypass
# Exploit Title: Aigital Wireless-N Repeater - Login Bypass
# Exploit Author: Matteo Mandolini
# Date : 13/04/2023
# Vendor Homepage: https://web.archive.org/web/20220625053314/https://www.aigital.com/
# Version: Mini_Router.0.131229

Login bypass

The device web application relies on a time-based mechanism to manage authentications. From the moment a legitimate user logs into the application with his or her credentials, any other user who can reach the web application is able to bypass the login and directly access the application's functionalities until the legitimate user's session expires. 




Copyright ©2024 Exploitalert.

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.