Acer Devices Authentication Bypass Vulnerability Allowing Access to Cleartext Login Credentials

An authentication bypass vulnerability has been identified in the web interface of certain Acer devices. The issue arises because the acer_cgi.log file is accessible without authentication, and this file contains cleartext login credentials for both web and Telnet access. As a result, unauthorized users can gain system access by exploiting this vulnerability.

Impact

Exploitation of this vulnerability allows unauthorized access to the system using the exposed cleartext login credentials for web and Telnet interfaces.