Kehua Charging Pile Cloud Platform Improper Authentication Vulnerability

A critical vulnerability has been identified in Kehua Charging Pile Cloud Platform version 1.0. This vulnerability resides in the file '/home' and is related to improper authentication, allowing remote attackers to bypass login mechanisms. The issue has been publicly disclosed, and an exploit is available.

Impact

Exploitation of this vulnerability allows for improper authentication, potentially leading to unauthorized access to the system.

Reproduction

To reproduce this vulnerability, navigate to the '/home' path of the Kehua Charging Pile Cloud Platform 1.0. Enter any password to bypass the login authentication. This can be done by capturing and modifying the response packets to manipulate the login process, successfully gaining access to the system as an 'admin' user.