security1 distinct publisher
Xiiaozet's LK100W lets an unauthenticated caller switch on its admin services
CISA's August 27 advisory lists three flaws in the LK100W below firmware 2.1.240, and one of them hands an attacker the authenticated position another one requires. The firmware is the only device-specific fix.
Publishers:cisa.gov
Reality
- Evidence76
- Adoption
- Insufficient
- Hype gap+12
- Incentives22