Vulnerability — CVE-2022-43364

CVE-2022-43364

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2022-43364
Description:: An access control issue in the password reset page of IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to arbitrarily change the admin password.
Last updated date:: 10/31/2022

Type:: exploit
Confidence:: HIGH
Date of publishing:: 10/31/2022
Reference url to background: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/5_reset_the_password.md