Synaccess netBooter NP-02x/NP-08x Authentication Bypass Vulnerability Allowing Unauthenticated Admin Account Creation

An authentication bypass vulnerability has been identified in Synaccess netBooter NP-02x and NP-08x models running version 6.8. The issue resides in the webNewAcct.cgi script, where the absence of proper control checks allows unauthenticated attackers to create admin user accounts. Exploiting this vulnerability enables unauthorized control over power supply management, including the ability to turn off power to connected resources.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling the creation of admin accounts and unauthorized access to power management controls.

Reproduction

The vulnerability can be reproduced by sending a POST request to the webNewAcct.cgi script with the desired username and password. This can be done using a tool like curl.