CVE-2022-28113

Published April 15th, 2022

View on NVD ↗

CVSS v3

7.2

HIGH

CVSS v2

HIGH

Affected

PROJECT

Description

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie.

code-byter/CVE-2022-28113

Unauthenticated RCE exploit for Fantec MWiD25-DS

GitHub