Authentication Bypass Vulnerability in Web Interface Allowing Man-in-the-Middle Attack

A vulnerability exists in the web interface due to improper implementation of the authentication mechanism. This flaw allows attackers to bypass authentication checks by sending a crafted post request with new settings, as there is no session token or authentication enforced. Exploiting this vulnerability could enable an attacker to redirect the device's domain name resolution to an arbitrary address, potentially facilitating a man-in-the-middle (MitM) attack.

Impact

Exploitation of this vulnerability could lead to unauthorized access and manipulation of device settings, with the potential to conduct man-in-the-middle attacks by intercepting and altering communications.