KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Insufficient Session Expiration
Posted by deepcore on March 20, 2021 – 5:31 pm
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE version 2.0.1 suffers an insufficient session expiration. This occurs when the web application permits an attacker to reuse old session credentials or session IDs for authorization. Insufficient session expiration increases the device’s exposure to attacks that can steal or reuse user’s session identifiers.
Post a reply
You must be logged in to post a comment.