User Impersonation

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to User Impersonation via the getConnInfo function in the adapter/aws-lambda/conninfo.ts‎ file. An attacker can gain unauthorized access to resources protected by IP-based access controls by...

CVE-2022-47648

CVE-2022-47648 affects the Bosch B420 Ethernet module. The issue is improper access control caused by IP-based authorization, allowing an attacker on the same network as a legitimate user to access the device’s control panel without authentication. The vulnerable firmware version cited is 02.02.0...