Description
Direct request ('Forced Browsing') issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If a remote attacker sends a specially crafted HTTP request to the product, the product data may be obtained or deleted, and/or the product settings may be altered.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001)
all versionsaffected
References
- https://www.inaba.co.jp/files/chocomini_vulnerability.pdf ↗
- https://jvn.jp/en/vu/JVNVU91154745/ ↗
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04 ↗
- https://www.nozominetworks.com/blog/unpatched-vulnerabilities-in-production-line-cameras-may-allow-remote-surveillance-hinder-stoppage-recording ↗