Defaultch40S

**Name of the Vulnerable Software and Affected Versions** Multilaser Sirius RE016 MLT1.0 **Description** A problem was found in the processing of the file `/cgi-bin/cstecgi.cgi`, which leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond. **Recommendations** As a temporary workaround, consider disabling access to the `/cgi-bin/cstecgi.cgi` file until a patch is available. Restrict remote access to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Multilaser Sirius RE016 MLT1.0 **Description** A critical issue has been found in the Password Change Handler component, specifically in the /cgi-bin/cstecgi.cgi file. The manipulation of an unknown function leads to improper authentication, allowing for remote attacks. The exploit has been publicly disclosed, and the vendor was contacted but did not respond. **Recommendations** For Multilaser Sirius RE016 MLT1.0, as a temporary workaround, consider restricting access to the /cgi-bin/cstecgi.cgi file to minimize the risk of exploitation. Avoid using the Password Change Handler component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.