Mennekes Amtron Series Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the Mennekes Amtron series, specifically in firmware versions through 5.22.3. This vulnerability allows an unauthenticated remote attacker to change the password of a user account by sending a crafted POST request to the /operator/operator endpoint.

Impact

Exploitation of this vulnerability allows for unauthorized password changes, potentially leading to unauthorized access or control over user accounts.

Reproduction

To reproduce this vulnerability, send a POST request to the /operator/operator endpoint without authentication. Include a payload in the request body that specifies the new password. The request must be formatted to mimic a standard web browser request, including appropriate headers such as 'User-Agent' and 'Accept'.