Description
Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Ateme Anevia Flamingo XL/XS
3.6.20affected3.2.9affected
Ateme SoapLive
2.4.1affected2.0.3affected
Ateme SoapSystem
1.3.1affected
References
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php ↗
- https://packetstormsecurity.com/files/172875/Anevia-Flamingo-XL-XS-3.6.x-Default-Hardcoded-Credentials.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/259059 ↗
- https://cxsecurity.com/issue/WLB-2023060019 ↗
- https://www.ateme.com/ ↗
- https://www.vulncheck.com/advisories/anevia-flamingo-xlxs-default-credentials-authentication-bypass ↗