CVE-2018-13862

Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 FW 303 allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml" URL, using the GET request "?id=0&attr=protectAccess&newValue=0" a successful attack will allow attackers to...

PT-2018-12225

Name of the Vulnerable Software and Affected Versions MusicCenter / Trivum Multiroom Setup Tool versions prior to V9.34 build 13381 Description The issue allows unauthorized remote attackers to reset authentication via the "/xml/system/setAttribute.xml" API endpoint, using a GET request with...

PT-2018-12229

Name of the Vulnerable Software and Affected Versions Trivum WebTouch Setup V9 version 2.53 build 13163 Description The issue allows unauthorized remote attackers to reset authentication settings, enabling them to login without authorization. This can be achieved by sending a GET request to the...