Description
Use of client-side authentication issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, a remote attacker may obtain the product login password without authentication.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001)
all versionsaffected
References
- https://www.inaba.co.jp/files/chocomini_vulnerability.pdf ↗
- https://jvn.jp/en/vu/JVNVU91154745/ ↗
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04 ↗
- https://www.nozominetworks.com/blog/unpatched-vulnerabilities-in-production-line-cameras-may-allow-remote-surveillance-hinder-stoppage-recording ↗