Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
Authentication Bypass
Iq Panel
NVD
CVSS 2.0
9.3
EPSS
0.8%
Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software updates, which allows man-in-the-middle attackers to bypass intended access restrictions via a modified. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
Authentication Bypass
Iq Panel
NVD
CVSS 2.0
9.3
EPSS
0.2%