CVE-2023-0750

Yellobrik PEC-1864 implements authentication checks via javascript in the frontend interface.  When the device can be accessed over the network an attacker could bypass authentication. This would allow an attacker to : - Change the password, resulting in a DOS of the users - Change the streaming source, compromising the integrity of the stream - Change the streaming destination, compromising the confidentiality of the stream This issue affects Yellowbrik: PEC 1864. No patch has been issued by the manufacturer as this model was discontinued.

Score
CVSS 3.1 9.8 Critical
Status
Modified - vulnerability@ncsc.ch
Published
2023-04-06
Last modified
2025-02-10
Weaknesses
CWE-311, CWE-602

Affected products

References

 
 
© AVABIS GmbH privacypolicy about