Description
An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do not expose credentials or provide administrative functionality, but may include non-public device content, such as screen-saver content or assets used by the web interface.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro
Default version status: unaffected
0 to < 1.78aaffected
WolfVision Cynap Pure (Next Gen), Cynap Bridge
Default version status: unaffected
0 to < 2.00daffected
WolfVision Cynap Videobar
Default version status: unaffected
0 to < 1.72eaffected
WolfVision Cynap, Cynap Core, Cynap Pure SDM
Default version status: affected
0affected