CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the CarlinKit CPC200-CCPA wireless hotspot feature, allowing network-adjacent attackers to exploit the issue without needing authentication. The vulnerability arises from hard-coded credentials in the wireless hotspot configuration, which can be leveraged to bypass authentication on the device.

Impact

Exploiting this vulnerability allows for authentication bypass on the affected device, potentially leading to unauthorized access or actions within the device's system.