CVE-2016-6536

Name of the Vulnerable Software and Affected Versions AVer Information EH6108H+ version X9.03.24.00.07l

Description The issue concerns the /setup URI, which allows remote attackers to bypass intended page-access restrictions or modify passwords by leveraging knowledge of a handle parameter value.

Recommendations For AVer Information EH6108H+ version X9.03.24.00.07l, as a temporary workaround, consider restricting access to the /setup URI until a patch is available. Avoid using the handle parameter in the affected API endpoint until the issue is resolved.