CVE-2017-15304 in HDMI Dongle
Summary
/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. This can be used to achieve persistent access to the admin panel even after an admin password change.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
10/14/2017
Disclosure
10/14/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 107863 | AIRTAME HDMI Dongle Admin Panel login.php Persistent session fixiation | 384 | Not defined | Official fix | CVE-2017-15304 |