Description
ArmorX Android APP's multi-factor authentication (MFA) for the login function is not properly implemented. Remote attackers who obtain user credentials can bypass MFA, allowing them to successfully log into the APP.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ArmorX | ArmorX APP | earlier – ≤ 1.5.2 | — |
References
- https://www.twcert.org.tw/tw/cp-132-7781-ef309-1.html third-party-advisory