ID:5856 - Exploit for Improper Authentication in CBAS Web - CVE-2019-10853

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error in the AggregatePost function when calling agg_postaction in auth.php script. A remote attacker can send a specially crafted parameters to a function, bypass authentication process and gain unauthorized access to full control of the device.

Remediation