PT-2024-10906 · Socifi · Socifi Guest Wifi

Published 2024-11-12 · Updated 2024-11-18 · CVE-2021-27700

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions SOCIFI Socifi Guest wifi as SAAS wifi portal (affected versions not specified)

Description The issue concerns insecure permissions, allowing any authorized customer with partner mode to switch to another customer dashboard. This enables them to perform various actions, such as modifying or deleting users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2021-27700

Affected Products

Socifi Guest Wifi

References · 5

• 🔥 https://github.com/Mrnmap/mrnmap-cve/blob/main/CVE-2021-27700 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-27700 · Security Note
• https://twitter.com/CVEnew/status/1856828066208858436 · Twitter Post
• https://t.me/cvenotify/101449 · Telegram Post
• https://t.me/cvedetector/10759 · Telegram Post