GatesAir Maxiva UAXT and VAXT Transmitters Session Hijacking Vulnerability

A session hijacking vulnerability has been identified in the web-based management interface of GatesAir Maxiva UAXT and VAXT transmitters. This vulnerability allows unauthenticated attackers to access exposed log files, which may contain sensitive session-related information such as session IDs and authentication success tokens. Exploiting this vulnerability could enable attackers to hijack active sessions, gain unauthorized access, and escalate privileges on the affected devices.

Impact

Exploitation of this vulnerability could lead to session hijacking, unauthorized access, and privilege escalation on the affected transmitters.