The vulnerability of the “Forgotten Password” function on the IIoT platform of ifm Moneo devices, including IFM QHA300, IFM QHA210, and IFM QVA200, allows a hacker to change the administrator password.

The vulnerability of the “Forgotten Password” function on the IIoT platform of ifm Moneo devices, namely IFM QHA300, IFM QHA210, and IFM QVA200, is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to remotely change the administrator’s...

PT-2024-4419

Name of the Vulnerable Software and Affected Versions moneo appliance affected versions not specified IFM QHA300 affected versions not specified IFM QHA210 affected versions not specified IFM QVA200 affected versions not specified Description An unauthenticated remote attacker can change the admi...