Arbitrary File Download Vulnerability in FANTEC GmbH MWiD25-DS Firmware v2.000.030

Arbitrary File Download Vulnerability in FANTEC GmbH MWiD25-DS Firmware v2.000.030

CVE-2022-26591 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request.

Learn more about our Web Application Penetration Testing UK.