PT-2017-17986

Name of the Vulnerable Software and Affected Versions Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior Description A Use of Client-Side Authentication issue was discovered in the web interface, which uses JavaScript to check client authentication and redirect unauthorized users...

CVE-2017-7909: Use of Client-Side Authentication

A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access...

CVE-2017-7909

The CVE-2017-7909 issue affects Advantech B+B SmartWorx MESR901, specifically firmware 1.5.2 and earlier. The vulnerability stems from the web interface using client-side authentication (CWE-603), allowing an unauthenticated attacker to bypass authentication and access restricted web pages by int...