Copeland XWEB Pro Authentication Bypass Vulnerability Allowing Pre-Authenticated Code Execution

An authentication bypass vulnerability has been identified in Copeland XWEB Pro versions through 1.12.1. This vulnerability allows attackers to bypass authentication requirements and execute arbitrary code on the affected system without prior authentication.

Impact

Exploitation of this vulnerability could lead to unauthorized authentication bypass and pre-authenticated arbitrary code execution on the affected system.

Remediation

Copeland has released a patch for this vulnerability. Users are advised to update XWEB Pro to the latest version available. Instructions for updating can be found on the Copeland Software Update page, or users can update directly from Copeland servers via the SYSTEM -- Updates | Network menu.