User Impersonation

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to User Impersonation via the getConnInfo function in the adapter/aws-lambda/conninfo.ts‎ file. An attacker can gain unauthorized access to resources protected by IP-based access controls by...

CVE-2022-47648

CVE-2022-47648 affects the Bosch B420 Ethernet module. The issue is improper access control caused by IP-based authorization, allowing an attacker on the same network as a legitimate user to access the device’s control panel without authentication. The vulnerable firmware version cited is 02.02.0...

CVE-2022-47648: Improper Access Control

An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or authentication due to the IP based authorization. If an authorized user has accessed a publicly available B420 product using valid credentials, an...