Paxton Paxton10 Twilio API Credential Exposure Vulnerability

A vulnerability exists in the firmware of Paxton Paxton10 versions prior to 4.6 SR6. The issue arises from hard-coded credentials for the Twilio API embedded in the firmware file rootfs.tar.gz. A remote attacker who acquires this firmware can extract the credentials, potentially leading to unauthorized access to the Twilio account, with risks of information disclosure, service disruption, and misuse of Twilio services.

Impact

Exploitation of this vulnerability could result in unauthorized access to Twilio accounts, allowing attackers to misuse Twilio services, disrupt associated operations, and access confidential information.