Default credentials

2017-10-1503:29:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a “Cookie: PHPSESSID=” header. This can be used to achieve persistent access to the admin panel even after an admin password change.

CPENameOperatorVersion
hdmi_dongle_firmwarele2.3.3

CPE	Name	Operator	Version
	hdmi_dongle_firmware	le	2.3.3

References

www.utkusen.com/blog/multiple-vulnerabilities-on-airtame-device-before-version-3.html