CVE-2024-24300 Information

Description

4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control. The device uses the same set of credentials regardless of how many times a user logs in the content of the cookie remains unchanged.

Reference

https://github.com/yckuo-sdc/PoC