Access Manager 92Xx K7

By default, the password for the Access Manager's web interface, is set to 'admin'. In the tested version changing the password was not enforced.

Published: 2026-01-26T10:06:31.533Z
Updated: 2026-01-26T15:38:06.530Z

The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is against the least privilege principle. If an attacker is able to execute code on the system via other vulnerabilities it is possible to directly execute commands with highest privileges.

Published: 2026-01-26T10:06:13.702Z
Updated: 2026-01-27T18:44:41.817Z

With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, stored PINs and so on can be modified and read, in order to gain SSH root access on the Linux-based K7 model. On the Windows CE based K5 model, the password for the Access Manager can additionally be read in plain text from the stored SQLite database.

Published: 2026-01-26T10:06:02.727Z
Updated: 2026-01-26T14:52:15.466Z

With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or use the 6-Pin tag-connect cable). Thus, the attacker gains access to the bootloader, where the kernel command line can be changed. An attacker is able to gain a root shell through this vulnerability.

Published: 2026-01-26T10:05:54.218Z
Updated: 2026-01-26T15:12:47.211Z

Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information is stored. Therefore, it is possible to spoof the IP address of a logged-in user to gain access to the Access Manager web interface.

Published: 2026-01-26T10:05:20.665Z
Updated: 2026-01-26T16:00:07.304Z