Technostrobe HI-LED-WR120-G2 vulnerabilities

Missing authorization in the deletefile function of the FsBrowseClean component in Technostrobe HI-LED-WR120-G2 (version 5.5.0.1R6.03.30). Manipulation of the dir/path argument allows remote file deletion.

A weakness has been identified in Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 in an unknown function of the file /fs. Manipulating the argument cwd can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made public and could be used for attacks.

Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 is vulnerable to CSRF in an unknown function. The attack can be performed remotely, and the exploit has been publicly released.

Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 has a vulnerability in an unknown function of the /fs file in the Configuration Data Handler component. Manipulating the File argument leads to information disclosure. The attack is remote, and the exploit is public. The vendor did not respond.

Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 has a vulnerability in the index_config function of the /LoginCB file, causing improper authentication. The attack can be performed remotely, and the exploit is publicly available.

The Technostrobe HI-LED-WR120-G2 device version 5.5.0.1R6.03.30 has a vulnerability in an unknown function of the /Technostrobe/ endpoint. Manipulation leads to improper access controls. The attack can be performed remotely, and the exploit has been made public. The vendor did not respond.