CVE Catalog

CVE-2004-2214

Critical
Published: Translated: NVD NIST

Summary

Mbedthis AppWeb HTTP server before version 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.

Risk Assessment

An attacker can gain unauthorized access to protected server resources, potentially leading to data leakage or system integrity compromise.

Recommendation

It is recommended to immediately upgrade Mbedthis AppWeb server to version 1.1.3 or later, which fixes this vulnerability.

Original NVD description (English source)

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS