Multilaser Sirius Password Change Handler Improper Authentication Vulnerability

A critical vulnerability has been identified in the Multilaser Sirius RE016 MLT1.0 model, specifically within an unknown function of the file '/cgi-bin/cstecgi.cgi', which handles password changes. This vulnerability allows for improper authentication and can be exploited remotely. The issue has been publicly disclosed, and the vendor was contacted prior to this disclosure but did not respond.

Impact

Exploitation of this vulnerability allows for improper authentication, potentially leading to unauthorized access or actions within the application.