Empirbus Wireless Display Unit Firmware vulnerabilities
3 known vulnerabilities in Empirbus Wireless Display Unit Firmware from Garmin. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Empirbus Wireless Display Unit Firmware: Missing Authentication for Critical Functionality
The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed. The WDU web site only performs authentication with the client within the client's browser. The WebSockets used to communicate with the WDU server do n
- 9.3 Critical severity
Empirbus Wireless Display Unit Firmware: Cross-Site Request Forgery
The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack. Among other uses, the WDU utilizes WebSockets to control settings, including administrative settings. This allows a network attacker to t
- 7.5 High severity
Empirbus Wireless Display Unit Firmware: Improper Link Resolution Before File Access
The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack. If a malicious graphics package containing symlinks is uploaded, the web server follows the supplied links when serving content. No mechanisms to restrict those link t