2wcom IP-4c security vulnerability

The 2wcom IP-4c is an audio codec device from the German company 2wcom. A security vulnerability exists in the 2wcom IP-4c version 2.15.5, which stems from an information disclosure in the specific endpoint /cwi/ajaxrequest/getdata.php, which could lead to an attacker obtaining the hashed passwor...

PT-2025-38759

Name of the Vulnerable Software and Affected Versions 2wcom IP-4c version 2.15.5 Description The 2wcom IP-4c device version 2.15.5 is subject to a Broken Access Control issue. Manager-level users can bypass intended access restrictions on sensitive endpoints by intercepting and modifying requests...