Vulnerabilidades do Axeltechnology Streamermax Mk Ii Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Axeltechnology Streamermax Mk Ii Firmware: 1 registro(s), com versões afetadas e correções.
cpe:2.3:o:axeltechnology:streamermax_mk_ii_firmware

CVE-2025-63223 Crítica · 9.8 CWE-284 19/11/2025

Improper Access Control em Axeltechnology Streamermax Mk Ii Firmware

The Axel Technology StreamerMAX MK II devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system settings, leading to full compromise of the device.