The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of the admin (operator) and manufacturer accounts via crafted POST requests.CreditsS. Eisenreich-Dietz (CyberDanube)Referenceshttps://cyberdanube.com/security-research/multiple-vulnerabilities-in-mennekes-amtron-series/
