CVE-2017-14335

On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.

Score
CVSS 3.0 7.5 High
Status
Modified - cve@mitre.org
Published
2017-09-12
Last modified
2024-08-05
Weaknesses
CWE-20

Affected products

References

 
 
© AVABIS GmbH privacypolicy about