CWE Code: 287
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Authentication
Summary: on avtech room alert 3e devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=resetdefaults&src=ra reset and using the default credentials to get in.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-07-07
Last Modified Date: 2019-08-09