Skip to content
OpenAdvisories
High · 8.1 CVE-2023-25017 EUVD-2023-28996GHSA-9wc4-3f6c-f7pc

Rifartek IOT Wall - Broken Access Control

Published Mar 27, 2023 · Updated Feb 19, 2025 · Assigned by twcert

Description

RIFARTEK IOT Wall has a vulnerability of incorrect authorization. An authenticated remote attacker with general user privilege is allowed to perform specific privileged function to access and modify all sensitive data.

Affected products

VendorProductAffectedFixed
Rifartek IOT Wall 22 —

References