critical9.8
CVE-2021-38167
Roxy-WI through 5.2.2.0 allows SQL Injection via check_login.
Impact
Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to bypass authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Roxy-Wi | Roxy-Wi | through 5.2.2.0 |