The authentication mechanism can be bypassed by overflowing the value of the Cookie authentication field, provided there is an active user session.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Name | Vendor | Start Version | End Version |
---|---|---|---|
H8951-4g-esp_firmware | Hongdian | * | 2310271149 (excluding) |