| 标题 | Gigatech R&D Corporation PDV5701 Config Web Management Firmware for PDV5701 DoorStation SwVersion 1.0.31_240305_112640，HW Version 004.002.001 Missing Authentication |
|---|
| 描述 | Gigatech PDV5701 Config Web Management Firmware SwVersion 1.0.31_240305_112640 has a missing authentication vulnerability in its WebSocket management interface.
An unauthenticated attacker can access http://<device-ip>:81/index.html and connect to ws://<device-ip>:81/getparameter without any cookie, token, or login session. The device returns Webmode:"0" together with sensitive administrator credential fields, including ACCUSER and ACCPASSWD.
The leaked credentials are valid. Sending a setlogin WebSocket message with the leaked account and password returns {"action":"CheckLogin","data":"success"}, allowing administrative access to the web management interface.
Other unauthenticated WebSocket endpoints, such as /getconfig and /getaccount, also expose device configuration and account records. The WebSocket service does not properly validate the Origin header.
Successful exploitation may lead to administrator credential disclosure, sensitive data leakage, and management interface takeover.
Affected version verified: SwVersion 1.0.31_240305_112640, HW Version 004.002.001. |
|---|
| 来源 | ⚠️ https://github.com/CSDVi/cve/issues/2 |
|---|
| 用户 | david_12 (UID 99465) |
|---|
| 提交 | 2026-07-19 12時38分 (2 月前) |
|---|
| 管理 | 2026-09-21 19時48分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 408193 [Gigatech PDV5701 1.0.31_240305_112640 WebSocket Service /index.html 弱身份验证] |
|---|
| 积分 | 20 |
|---|