Description
R Radio Network FM Transmitter 1.07 allows unauthenticated attackers to access the admin user's password through the system.cgi endpoint, enabling authentication bypass and FM station setup access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| R Radio Network | Radio Network FM Transmitter | 1.07 – < 1.09 | 1.09 |
References
- ExploitDB-51855 exploit
- Security Advisory for ZSL-2023-5802 vendor-advisory
- https://www.vulncheck.com/advisories/r-radio-network-fm-transmitter-107-system-settings-disclosure third-party-advisory