CVE-2023-35794

creationtimestamp| type| source ---|---|--- 2023-10-27 09:57:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5581...

CVE-2023-35794

CVE-2023-35794 affects Cassia Access Controller 2.1.1.2303271039. The issue is unprotected access to the Web SSH terminal endpoint (spawned console) due to lack of session cookie validation; only Basic Authentication to the SSH console is used. This allows unauthenticated access to the console, e...