ID:8196 - Exploit for Authentication Bypass by Capture-replay in DT-R002 - CVE-2022-29593

 
Main Vulnerability Database Exploits ID:8196 - Exploit for Authentication Bypass by Capture-replay in DT-R002 - CVE-2022-29593

ID:8196 - Exploit for Authentication Bypass by Capture-replay in DT-R002 - CVE-2022-29593

Published: July 31, 2022


Vulnerability identifier: #VU65419
Vulnerability risk: High
CVE-ID: CVE-2022-29593
CWE-ID: CWE-294
Exploitation vector: Remote access
Vulnerable software:
DT-R002

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an authentication bypass by capture-replay in the relay_cgi.cgi. A remote attacker can control the devices attached to the relays without requiring authentication.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.