JanTek JTC-200 RS232-NET Connector CSRF / Missing Authentication Vulnerability

JanTek JTC-200 RS232-NET Connector suffers from cross site request forgery and missing authentication vulnerabilities...

JanTek JTC-200 RS232-NET Connector CSRF / Missing Authentication

Vendor: JanTek Equipment: JTC-200 Vulnerabilities: Cross-site Request Forgery, Improper Authentication Advisory URL: https://ipositivesecurity.com/2017/10/28/ics-jantek-jtc-200-rs232-net-converter-advisory-published/ ICS-CERT Advisory https://ics-cert.us-cert.gov/advisories/ICSA-17-283-02 CVE-ID...

RS232-NET Converter (JTC-200) CSRF / Weak Credentials / Unauthenticated Access

RS232-NET Converter JTC-200 - Multiple vulnerabilities About RS232-NET Converter model JTC-200 http://www.jantek.com.tw/en/product/73 Seen deployed in: CHTD, Chunghwa Telecom Co., Ltd. Taiwan HiNet Taiwan & China PT Comunicacoes Portugal Sony Network Taiwan Limited Taiwan Vodafone Portugal Portug...