NOVELSAT NS3000 and NS2000 Products Session Hijacking Vulnerability

A session hijacking vulnerability has been identified in NOVELSAT's NS3000 version 8.1.1.125110, 7.2.8.124852, and 7.x, as well as in NS2000 version 7.02.08. The issue arises from missing authentication checks in the query.fcgi endpoint, allowing attackers to execute session hijacking attacks.

Impact

Exploitation of this vulnerability allows for session hijacking, where an attacker can take over a user's session, potentially leading to unauthorized actions or access within the application.