The vulnerability in the web interface of the egOS operating system for Welotec industrial devices allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to the device.

The vulnerability of the egOS web interface for Welotec industrial devices relates to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to the device by creating HS256 tokens...