Fantec: >> Mwid25-Ds Firmware Security Vulnerabilities
An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie.
CVSS Score
7.2
EPSS Score
0.084
Published
2022-04-15
FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request.
CVSS Score
7.5
EPSS Score
0.006
Published
2022-04-06