| 제목 | Akubela (by Akuvox) HyPanel PS51 (Smart Home Control Panel / Intercom Gateway) 51.130.40.26 Authentication Bypass Using Alternate Channel |
|---|
| 설명 | We have found an authentication bypass and logic flaw exists in the akubela HyPanel (Model PS51, Software Version x.x.x.x) web interface when default credentials remain unchanged.
By analyzing the application's client-side JavaScript files, an engineering mode parameter (?engrmode=admin) was identified. Under normal circumstances, attempting to access administrative features with default credentials triggers a mandatory password-change enforcement prompt. However, if the client-side cache or local browser storage is cleared prior to access, the application fails to properly enforce this mandatory state check.
By appending ?engrmode=admin (e.g., https://<ip>/login?engrmode=admin) after clearing the browser cache, an attacker can bypass both the standard login mechanism and the forced password-change prompt, gaining direct unauthorized access to the administrative dashboard without satisfying security initialization requirements.
Impact: This grants an attacker full administrative control of the panel. From the dashboard, an attacker can unlock and open connected doors, control lighting, modify climate/HVAC settings, and alter other home and building automation functions managed by the device. Because the HyPanel governs physical access and connected systems, this bypass has direct physical-security and safety consequences, not just data exposure.
We are happy to provide a proof-of-concept video or any further detail you need to reproduce and verify this, and we would appreciate acknowledgment once it is resolved. |
|---|
| 원천 | ⚠️ https://github.com/wisklr/Authentication-Bypass-Vulnerability-in-akubela-HyPanel-PS51.git |
|---|
| 사용자 | Wisklr (UID 101895) |
|---|
| 제출 | 2026. 10. 04. PM 02:59 (24 날 ago) |
|---|
| 모더레이션 | 2026. 10. 26. AM 09:12 (22 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 426335 [Akuvox Akubela HyPanel PS51 51.130.40.26 /login engrmode 약한 인증] |
|---|
| 포인트들 | 20 |
|---|