Q-Free MaxTime Improper Input Validation Vulnerability Allowing Configuration Modification

A vulnerability allowing improper input validation has been identified in the Q-Free MaxTime application, specifically in the ldbMT.so component, and affects versions through 2.11.0. This vulnerability allows authenticated remote attackers to modify system configurations by sending crafted HTTP requests.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications of system configurations, potentially causing instability or unintended changes in system behavior.

Remediation

Until a patch is released, it is recommended to restrict and monitor network access to the management web application on devices running Q-Free MaxTime versions through 2.11.0.