critical9.8Public exploit code
CVE-2018-13862
Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authentication via the "…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Touchpad / Trivum WebTouch Setup 2.53 build 13163 - Authentication Bypass2018-07-20 · webapps · hardware
Impact
Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml" URL, using the GET request "?id=0&attr=protectAccess&newValue=0" (a successful attack will allow attackers to login without authorization).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trivum | Webtouch Setup V9 Firmware | Version 2.53 |