Skip to content
OpenAdvisories

Vendor

AL-KO

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    Hard-coded AWS Key in AL-KO Robolinho Update Software

    AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the object…