BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3.Referenceshttps://sku11army.blogspot.com/2020/03/bwa-multiple-vulnerabilities-in-direx.html