CVE-2020-11542

Name of the Vulnerable Software and Affected Versions 3xLOGIC Infinias eIDC32 version 2.213

Description The issue allows authentication bypass via the CMD.HTM endpoint, specifically when the CMD parameter is used, because authentication relies on the client-side interpretation of the MYKEY substring.

Recommendations For version 2.213, as a temporary workaround, consider restricting access to the CMD.HTM endpoint until a patch is available. Avoid using the CMD parameter in the CMD.HTM endpoint to minimize the risk of exploitation.