CVE-2022-26591

FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request...

CVE-2022-28113

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie...

CVE-2022-28113

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie...

PT-2022-18818 · Fantec Gmbh · Fantec Mwid25-Ds Firmware

Name of the Vulnerable Software and Affected Versions: FANTEC GmbH MWiD25-DS Firmware version 2.000.030 Description: The issue allows attackers to write files and reset user passwords without having a valid session cookie. This is due to a problem in the upload.csp of the firmware. Recommendation...

FANTEC MWiD25-DS 安全漏洞

The FANTEC MWiD25-DS is a wireless extender from FANTEC Germany. A security vulnerability exists in the FANTEC MWiD25-DS that allows an attacker to write to a file and reset a user's password without a valid session cookie...

PT-2022-17945 · Fantec Gmbh · Mwid25-Ds

Name of the Vulnerable Software and Affected Versions: FANTEC GmbH MWiD25-DS Firmware version 2.000.030 Description: The issue allows unauthenticated attackers to access and download arbitrary files via a crafted GET request. Recommendations: For FANTEC GmbH MWiD25-DS Firmware version 2.000.030, ...

FANTEC MWiD25-DS 授权问题漏洞

The FANTEC MWiD25-DS is a wireless extender from FANTEC Germany. An authorization issue vulnerability exists in FANTEC MWiD25-DS Firmware version 2.000.030, which can be exploited by an attacker to access and download arbitrary files via a specially crafted GET request...

Exploit for Reliance on Cookies without Validation and Integrity Checking in Fantec Mwid25-Ds_Firmware

PoC exploit for CVE-2022-28113, an unauthenticated remote code e...