Micro Research MR-GM5 Series Authentication Bypass Vulnerability Allowing Configuration Changes

An authentication bypass vulnerability has been identified in Micro Research MR-GM5L-S1 and MR-GM5A-L1 products, both of which are affected by firmware versions prior to v2.01.04N1_02. This vulnerability may allow an attacker to bypass authentication and alter device configurations. Additionally, this vulnerability is part of a group that includes code injection and unauthorized login issues, which could lead to remote code execution.

Impact

Exploitation of this vulnerability allows an attacker to bypass authentication and change the device configuration. When combined with other vulnerabilities in the same product line, it could lead to unauthorized access and execution of arbitrary commands with root privileges.

Remediation

Users are advised to update the firmware to version v2.01.04N1_02 or later.