critical9.8
CVE-2020-11542
3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpret…
Impact
3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the <KEY>MYKEY</KEY> substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 3xlogic | Infinias Eidc32 Firmware | Version 2.213 |
| 3xlogic | Infinias Eidc32 Web | Version 1.107 |