Skip to content
OpenAdvisories
High · 8.8 CVE-2021-37911 EUVD-2021-24389GHSA-39qh-hjm3-j4w3

The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any s…

Published Aug 30, 2021 · Updated Sep 16, 2024 · Assigned by twcert

Description

The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any system directory of this device through the interface and execute arbitrary commands if he enters the local subnetwork.

Affected products

VendorProductAffectedFixed
BenQ EH600 OTA unspecified – ≤ v01.00.30.00 —

References