Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-10381 EUVD-2024-33076GHSA-wwxr-xf9x-xpj6

Authentication Bypass Vulnerability in Matrix Door Controller

Published Oct 25, 2024 · Updated Oct 25, 2024 · Assigned by CERT-In

Description

This vulnerability exists in Matrix Door Controller Cosec Vega FAXQ due to improper implementation of session management at the web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the vulnerable device.

Successful exploitation of this vulnerability could allow remote attacker to gain unauthorized access and take complete control of the targeted device.

Affected products

VendorProductAffectedFixed
Matrix Comsec Matrix Door Controller Cosec Vega FAXQ <V2R17 —

References