Command injection

SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials...

CVE-2023-39167

CVE-2023-39167 affects SENEC Storage Box V1, V2 and V3, where an unauthenticated remote attacker can obtain device logfiles containing sensitive data due to an improper access control vulnerability. CVSS v3.1 base score 7.5 (HIGH) with network attack vector, low attack complexity, no privileges, ...