PT-2024-32267

Name of the Vulnerable Software and Affected Versions Affected devices affected versions not specified Description The issue concerns improper authentication of user requests to the "/ClientArea/RuntimeInfoData.mwsl" endpoint. This could allow an unauthenticated remote attacker to gain knowledge...

CVE-2024-46887: Authentication Bypass Using an Alternate Path or Channel

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum...