Threats tagged 'ghsa-p4c3-mv98-x49f'

ELCA Star Transmitter Remote Control firmware version 1.25 for multiple models contains an information disclosure vulnerability. An unauthenticated attacker can access the /setup.xml endpoint, which is unprotected, to retrieve admin credentials stored in plaintext. This exposure allows potential remote compromise of the transmitter system. The vulnerability has a high severity rating with a CVSS score of 7.5.