Papouch Backdoor Account / CSRF / Missing Authentication

Papouch TME ethernet thermometer and TME multi: Temperature and humidity via ethernet both suffer from cross site request forgery, hardcoded backdoor super user accounts, and missing access controls.

Leave a Reply