CVE-2017-7909
CriticalSummary
A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users.
Risk Assessment
Attackers may intercept requests and bypass authentication to access restricted web pages, posing a serious threat to data security.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability and implement additional security measures such as monitoring network traffic.
Original NVD description (English source)
A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access restricted web pages.