Taiko AG1000-01A vulnerabilities

The Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web configuration interface. Unauthenticated attackers can access internal application pages such as index.zhtml, point.zhtml, and log.shtml without any session management or server-side authentication, enabling full administrative read and write access.

The Taiko AG1000-01A SMS Alert Gateway versions Rev 7.3 and Rev 8 contain hard-coded credentials in the web interface. Authentication is implemented entirely in client-side JavaScript, allowing credentials to be read from the page source.

Stored XSS vulnerability in Taiko AG1000-01A SMS Alert Gateway. An authenticated attacker can inject persistent JavaScript by fragmenting malicious payloads across admin form fields, bypassing length restrictions.