The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device.
Description: CAPEC-653 Use of Known Operating System Credentials
Solutions
The vendor provides a firmware update to version 7.42 (or higher) which can be downloaded via the vendor's customer server portal. It fixes most of the hard-coded credentials that can be directly exploited by an attacker. The vendor did not specify whether future patches will remediate the rest"
Configurations
Workarounds
Exploits
The SEC Consult Vulnerability Lab has published proof of concept material in the technical security advisory.
Credits
finder
Daniel Hirschberger (SEC Consult Vulnerability Lab)