CVE-2019-13406: Missing Authentication for Critical Function

A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without any authentication...

PT-2019-13318

Name of the Vulnerable Software and Affected Versions Advan VD-1 firmware versions up to 230 Description A broken access control issue allows an attacker to install arbitrary APKs without authentication by sending a POST request to "cgibin/ApkUpload.cgi". Recommendations For Advan VD-1 firmware...