CVE-2021-27453 Mesa Labs AmegaView authentication bypass

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

CVE-2021-27453

CVE-2021-27453 affects Mesa Labs AmegaView (3.0 and earlier). The vulnerability is an authentication bypass via default cookies that could allow an attacker to gain access to the web application. The public sources (NVD entry and ICS-CISA advisory) describe the issue and confirm the affected prod...

MesaLabs AmegaView

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mesa Labs Equipment: AmegaView Vulnerabilities: Command Injection, Improper Authentication, Authentication Bypass Using an Alternate Path or Channel, Improper Privilege Management 2. RISK EVALUATION...