Description
Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection attack to read, modify or delete backend database without authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Changing | MOTP(Mobile One Time Password) | next of 3.5 – < unspecified | unspecified |