Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) via ZohoClient.php.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| wildix | wms | * |
An issue was discovered in /cgi-bin/login_rj.cgi in Wildix WSG24POE version 103SP7D190822, allows attackers to bypass authentication.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| wildix | wsg24poe_firmware | 103sp7d190822 |