Arbitrary Account Password Reset Vulnerability in Hongyi Environmental Protection Android APP

Hongyi Environmental Android APP is an air purifier management tool. There is an arbitrary account password reset vulnerability in Hongyi Environmental Protection Android APP. After logging into the system, an attacker can reset any password by grabbing packets and modifying them through the forg...