CVE-2021-43442

CVE-2021-43442 concerns a logic flaw in i3 International Annexxus Cameras (Ax-n 5.2.0 Ax46; 5.0.9 Ax68; 5.0.9 Ax78) where the system blocks multiple admin accounts but can be bypassed via parameter manipulation using PUT/DELETE and by calling the UserPermission endpoint with the created account’s...