← Back

Touch Hd 12 Firmware

touch_hd_12_firmware

Vendor: Rainmachine • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-6908
1Rainmachine
2Mini 8 Firmware
Touch Hd 12 Firmware
Nov 21, 2024
Nov 1, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allowing an unauthenticated attacker to perform authenticated actions on the devi...Show more
An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allowing an unauthenticated attacker to perform authenticated actions on the device via a 127.0.0.1:port value in the HTTP 'Host' header, as demonstrated by retrieving credentials.Show less