Honding Technology Smart Parking Management System Missing Authorization Vulnerability Allowing Unauthorized Administrator Account Creation

A missing authorization vulnerability has been identified in the Smart Parking Management System by Honding Technology, affecting versions 1.0 through 1.4. This vulnerability allows remote attackers with regular privileges to access a specific functionality that enables the creation of administrator accounts. Once these accounts are created, attackers can log into the system using the newly created credentials.

Impact

Exploitation of this vulnerability allows for unauthorized creation of administrator accounts, which can be used to gain elevated access within the application.

Remediation

Users are advised to update the Smart Parking Management System to version 1.5 or later.