|    |    |    | Today: 18-Sep-2018 |

FibeAir IP-10 Authentication Bypass

June 16, 2016 | Posted in ExploitAlert

FibeAir IP-10 devices do not properly ensure that a user has authenticated before granting them access to the web interface of the device. The attacker simply needs to add a cookie to their session named "ALBATROSS" with the value "0-4-11".


Source: FibeAir IP-10 Authentication Bypass

Taged in: authentication, bypass, fibeair