Moxa AIG-302 ThingsPro Edge through 1.4.0 can leak keys
An unauthenticated adjacent attacker can abuse a hard-coded key; a logged-in user can read the secrets API.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
An unauthenticated adjacent attacker can abuse a hard-coded key; a logged-in user can read the secrets API.
Today 102 readers · 103 views · 4 reads · all time 108K views