Browan Communications PrismX MX100 AP Controller Insufficiently Protected Credentials Vulnerability

A vulnerability allowing authenticated remote attackers to access SMTP plaintext passwords through the web interface has been identified in the Browan Communications PrismX MX100 AP controller, versions prior to 1.03.23.01. This issue arises from insufficient protection of credentials, enabling privileged remote attackers to exploit the vulnerability.

Impact

Exploitation of this vulnerability allows for the unauthorized retrieval of SMTP plaintext passwords, potentially leading to unauthorized email access or manipulation.

Remediation

Users are advised to update the firmware to version 1.03.23.01 or later.