← Database

CVE-2022-28113

HIGH CVSS: 7.2 Published: 2022-04-15 Modified: 2026-06-17

Description

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie.

Affected Platforms

Fantec Mwid25-DsFantec Mwid25-Ds Firmware

Weakness Type

CWE-565

References