Panabit PAP-XM320 Authentication Bypass Vulnerability in Embedded HTTP Server

An authentication bypass vulnerability has been identified in the embedded HTTP server of Panabit PAP-XM320, affecting versions up to and including 7.7. The vulnerability arises because the server validates session cookies using a filesystem existence check based on user-controlled cookie values, without proper sanitization. This flaw allows for directory traversal and bypass of authentication.

Impact

Exploitation of this vulnerability allows for authentication bypass, potentially leading to unauthorized access or actions within the application.