Deep Sea Electronics DSE855 Remote Authentication Bypass

Deep Sea Electronics DSE855 is vulnerable to configuration disclosure when direct object reference is made to the Backup.bin file using an HTTP GET request. This will enable an attacker to disclose sensitive information and help her in authentication bypass, privilege escalation, and full system access.

access attacker authentication authentication bypass backup bypass configuration disclosure electronics enable escalation file http http get information object privilege privilege escalation reference remote authentication request sea sensitive sensitive information system using vulnerable