Description
The Diviotec professional series exposes a web interface. One endpoint is vulnerable to arbitrary command injection and hardcoded passwords are used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Diviotec | nbr222p | ≤ 2.0170.3030 | — |
| Diviotec | nbr222pv | ≤ 2.0170.3030 | — |
| Diviotec | nbr224p | ≤ 2.0170.3030 | — |
| Diviotec | nbr225p | ≤ 2.0170.3030 | — |
| Diviotec | nbr226p | ≤ 2.0170.3030 | — |
| Diviotec | nbf232p | ≤ 2.0170.3030 | — |
| Diviotec | nbf233p | ≤ 2.0170.3030 | — |
| Diviotec | ndr252p | ≤ 2.0170.3030 | — |
| Diviotec | ndr255p | ≤ 2.0170.3030 | — |