1 results (0.001 seconds)

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

05 Aug 2024 — Multiple Pimax products accept WebSocket connections from unintended endpoints. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker. • https://github.com/OpenMAR/PiTool • CWE-923: Improper Restriction of Communication Channel to Intended Endpoints •