Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized administrative access, disclose sensitive information, modify device configuration, hijack authenticated sessions, and disrupt device operation.
The following versions of Ebyte NE2-D11 are affected:
NE2-D11 Firmware FW-9167-0-11
Vendor
Equipment
Ebyte
Ebyte NE2-D11
Missing Authentication for Critical Function, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials, Use of Client-Side Authentication, Use of GET Request Method With Sensitive Query Strings, Cross-Site Request Forgery (CSRF), Improper Restriction of Excessive Authentication Attempts, Improper Restriction of Rendered UI Layers or Frames, Missing Authorization
Critical Infrastructure Sectors: Critical Manufacturing, Energy