CVE-2021-40350
webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authenti…
Published: 2021-09-01 · CVSS: Unscored
webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7