goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_user<*1*>administrator<*1*>123456 request.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-03-11T15:26:04

Updated: 2024-08-04T10:50:57.821Z

Reserved: 2020-03-05T00:00:00

Link: CVE-2020-10181

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-03-11T16:15:12.007

Modified: 2024-11-21T04:54:55.360

Link: CVE-2020-10181

cve-icon Redhat

No data.