See how digital watchdog compares to other vendors in security performance
The affected products are missing authorization on state-changing CGIs and session checks are not performed.
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable.
The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command.
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable.