CVE-2022-28113 | BDVDB-2026-174283 Detail

Description#

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://drive.google.com/file/d/1OvpNieX3pYFaZprglr5T0lV0WuLoLcLu/view?usp=sharing
https://drive.google.com/file/d/1s1AgI5Dw7_GNenmI-mw0Sx2B9MkNTbc7/view?usp=sharing
https://github.com/code-byter/CVE-2022-28113
https://code-byter.com/2022/04/06/fantec-wifi.html

Exploit#

No public exploit known

History#

Version 12022-04-15Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.