CVE-2018-10544

CVE-2018-10544 affects Meross MSS110 devices, up to firmware version 1.1.24, which expose an unauthenticated administrative web interface (admin.htm). The connected CNVD/NVD entries confirm a straightforward unauthenticated access path to manage interfaces, with the CNVD noting the risk of inform...

CVE-2018-10544: Improper Authentication

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...

PT-2018-9955

Name of the Vulnerable Software and Affected Versions: Meross MSS110 devices versions 1.1.24 and earlier Description: The issue concerns an unauthenticated admin.htm administrative interface in the affected devices. Recommendations: For Meross MSS110 devices versions 1.1.24 and earlier, update to...

CVE-2010-0550

The CVE-2010-0550 entry affects Geo++ GNCASTER 1.4.0.7 and earlier. The root issue is a faulty enforcement of HTTP Digest Authentication, allowing remote authenticated users to fall back to HTTP Basic Authentication and bypass the intended server policy. The connected sources confirm the affected...

CVE-2010-0550: Improper Authentication

admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated users to use HTTP Basic Authentication, bypassing intended server policy...