CVE-2020-11542

3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the MYKEY substring...

CVE-2020-11542

3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the MYKEY substring...

Authentication flaw

3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the MYKEY substring...

CVE-2020-11542

3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the MYKEY substring...

CVE-2020-11542

The connected documents provide concrete details for CVE-2020-11542 affecting 3xLOGIC Infinias eIDC32 Web version 1.107 with firmware 32 2.213. The root cause is authentication relying on client-side parsing of the MYKEY string, enabling an Authentication Bypass via CMD.HTM?CMD= without requiring...

CVE-2020-11542: Improper Authentication

3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the MYKEY substring...

PT-2020-12678

Name of the Vulnerable Software and Affected Versions 3xLOGIC Infinias eIDC32 version 2.213 Description The issue allows authentication bypass via the CMD.HTM endpoint, specifically when the CMD parameter is used, because authentication relies on the client-side interpretation of the MYKEY...