InfraPower PPS-02-S Q213V1 Authentication Bypass
Posted by deepcore on October 31, 2016 – 11:54 pm
InfraPower PPS-02-S Q213V1 suffers from an authentication bypass vulnerability. The device does not properly perform authentication, allowing it to be bypassed through cookie manipulation. The vulnerable function checkLogin() in ‘Function.php’ checks only if the ‘Login’ Cookie is empty or not, allowing easy bypass of the user security mechanisms.
Post a reply
You must be logged in to post a comment.