Airleader Master Control Security Vulnerabilities - CVSS Score 9 - 10

CVE-2020-26510

Airleader Master <= 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution.