Sipeed NanoKVM Unauthenticated Wi-Fi Configuration Endpoint Vulnerability

A vulnerability in Sipeed NanoKVM versions prior to 2.3.1 allows an unauthenticated attacker with network access to exploit a Wi-Fi configuration endpoint that lacks proper security checks. This exploitation could lead to unauthorized changes in the saved Wi-Fi network settings or be used to craft requests that exhaust system memory, causing the KVM process to terminate.

Impact

Exploitation of this vulnerability could result in unauthorized modification of Wi-Fi settings or a denial-of-service condition by terminating the KVM process.

Remediation

Users can update to Sipeed NanoKVM version 2.3.1 or later, where this vulnerability has been addressed.