critical9.8
CVE-2021-40350
webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cooki…
Impact
webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Christiedigital | Dwu850-Gs Firmware | Version 06.46 |