What’s Vulnerable › Vulnerabilities
CVE-2023-0750: Yellowbrik PEC-1864 authentication bypass
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-04-06 · updated 2026-06-17
- Weakness: CWE-602
Description
Yellobrik PEC-1864 implements authentication checks via javascript in the frontend interface. When the device can be accessed over the network an attacker could bypass authentication. This would allow an attacker to : - Change the password, resulting in a DOS of the users - Change the streaming source, compromising the integrity of the stream - Change the streaming destination, compromising the confidentiality of the stream This issue affects Yellowbrik: PEC 1864. No patch has been issued by the manufacturer as this model was discontinued.
Affected products
- Lynx-Technik Yellobrik Pec 1864 Firmware: all versions
References
- https://support.lynx-technik.com/support/solutions/articles/1000317081-pec-1864-web-ui-for-configuration
- https://support.lynx-technik.com/support/solutions/articles/1000317081-pec-1864-web-ui-for-configuration
Get alerted when CVE-2023-0750 or the next vulnerability affects your stack