Description
Multiple Pimax products accept WebSocket connections from unintended endpoints. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pimax | Pimax Play | prior to V1.21.01 | — |
| Pimax | PiTool | all versions | — |