CVE-2023-39169

The affected devices use publicly available default credentials with administrative privileges.

CVE-2023-39172

The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network traffic.