Can Demirel

The affected versions of the application have a path traversal issue that fails to restrict the ability of an attacker to gain access to restricted information.

The issue is related to the web interface of the software, where an attacker can bypass authentication using a specially crafted URL, potentially allowing for remote code execution. The vulnerability is caused by errors in the authentication mechanism, which can be exploited by a remote attacker to bypass authentication and execute arbitrary code.

The issue is caused by errors in processing GET requests in the web interface of the EMG12 Ethernet Modbus Gateway software. This can be exploited by a remote attacker using a specially crafted GET request to execute arbitrary code. The vulnerability may also allow an attacker to impersonate a legitimate user.

The issue allows remote authenticated users to change the configuration of Moxa PT-7728 devices via vectors involving a local proxy.