MOKOSmart MKGW1 Gateway Improper Session Management

Posted on 20 December 2023

MOKOSmart MKGW1 Gateway devices with firmware version 1.1.1 or below do not provide an adequate session management for the administrative web interface. This allows adjacent attackers with access to the management network to read and modify the configuration of the device.