Threats tagged 'ghsa-mg5x-6x36-w8v4'

A vulnerability in Meari client applications embedding the "com.meari.sdk" library allows unauthorized retrieval of WAN IP data for arbitrary devices. This is due to a server-side authorization failure in the API endpoint "GET /openapi/device/status". Affected applications include CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label versions up to 1.8.x. The vulnerability has a high severity with a CVSS score of 7.5.