Live Exposure Defense: From CVE to Confirmed Exposure in 12 Hours – See more

Back
New CVE Detected

CVE-2026-94493 – Authentication Bypass / Full Device Takeover – Gigatech PDV5701 v1.0.31_240305_1126

Be the first to know when new zero-days emerge:

Subscribe to Email Alerts
Subscribe to RSS Feed

Summary

CVE-2026-94493 is a missing-authentication vulnerability in the WebSocket management service of Gigatech PDV5701 devices (Config Web Management Firmware, SW version 1.0.31_240305_112640, HW version 004.002.001). An unauthenticated remote attacker can query the /getparameter WebSocket endpoint and retrieve administrator credentials and device configuration data, then use those credentials to fully authenticate and take over the device. The flaw carries a maximum CVSS score of 10.0 (Critical), and a public exploit is available.

Technical details

  • Root cause: The device’s WebSocket Service does not enforce authentication before responding to parameter-query requests on /index.html / the /getparameter action.
  • Trigger conditions: An attacker connects directly to the WebSocket endpoint (e.g., ws://<target-ip>:81/getparameter) with no prior session or credentials.
  • Attack vector: Network — remote and unauthenticated; no user interaction is required.
  • Impact: The server discloses sensitive data including the administrator username and plaintext password (ACCUSER/ACCPASSWD), RTSP camera address, serial number, UID, MAC address, internal network configuration, and cloud management credentials. The leaked credentials can then be replayed via the setlogin WebSocket action to obtain a fully authenticated administrative session, enabling configuration changes, firmware updates, factory resets, and service disruption.

Affected software

  • Gigatech PDV5701 Config Web Management Firmware, SW version 1.0.31_240305_112640, HW version 004.002.001 (WebSocket Service component). No other versions have been confirmed as affected or fixed at time of publication.

Severity

  • CVSS v3.1 Base Score: 10.0 (Critical)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Mitigation and recommended actions

  • Immediate: No vendor patch is currently available — Gigatech was notified of this disclosure but has not responded.
  • Workarounds/network mitigations:
    • Restrict network access to the device’s WebSocket service (e.g., port 81) to trusted management networks only; do not expose it to the internet.
    • Place affected devices behind a firewall or VPN and block unauthenticated inbound connections to the WebSocket interface.
    • Rotate the administrator password and any credentials that may have been exposed via the affected devices.
    • Monitor for unexpected WebSocket connections or unauthorized setlogin/configuration-change activity on affected devices.
    • Contact Gigatech for an updated firmware release addressing this issue, and apply it as soon as it becomes available.

References

Are you exposed?

Get a free report of your organization’s exposure to this CVE and threat

  • Mapping of all Assets with this Technology
  • Identification of potentially exposed assets to this CVE
  • Confirmation of verified exploitable assets
Get Exposure Report

How IONIX’s External Exposure Management Platform Detects and Validates
Zero-Days to Shrink MTTR

1

Map your entire attack surface (continously)

IONIX uses multi-factor discovery methods, including DNS analysis, certificate mapping, metadata inspection, and more, to automatically map every internet-facing asset across your environment. This includes cloud instances, third-party platforms, shadow IT, and even forgotten infrastructure that traditional tools miss.

2

Monitor for new CVEs

Dozens of threat intel feeds using agentic technology are continuously analyzed to detect the appearance of proof-of-concept code, exploit kits, and indicators of active targeting. IONIX goes further by applying AI to proactively evaluate whether emerging vulnerabilities are likely to be exploited, even before PoCs go public.

3

Identify Potential External Exposures

Not all CVEs matter. IONIX filters vulnerabilities by asking attacker-centric questions: Can it be reached from the internet? Does it require authentication? Is it being exploited in the wild? This dramatically reduces noise and focuses teams on threats that can actually be weaponized.

4

Create Safe, Scalable Exploit Validations

IONIX transforms real-world PoCs into safe, non-intrusive test payloads that can be run in production environments without disruption. These simulations are precisely targeted to the systems that are vulnerable, ensuring rapid validation without unnecessary load.

5

Execute Exploit Validations

By combining context about software stack, versioning, exposure status, and reachability, IONIX ensures that only the right payloads are executed against the right assets, maximizing efficiency and minimizing risk.

6

Drive Fast and Actionable Remediation

Results are routed through integrations with ticketing, SOAR, and SIEM tools. Issues are written in plain language, bundled into remediation clusters, and prioritized based on asset criticality, exploitability, and blast radius. This shortens mean time to remediation (MTTR) and empowers teams to act with confidence.

Are you exposed?

Get a free report of your organization’s exposure to this CVE and threat

  • Mapping of all Assets with this Technology
  • Identification of potentially exposed assets to this CVE
  • Confirmation of verified exploitable assets
Get Exposure Report
Close

Subscribe to Threat Center RSS

Copy/paste the link below into your preferred RSS reader or follow these instructions to subscribe to Slack alerts.

Open RSS feedSlack setup instructions

Close

Get Real-Time CVE Alerts to Your Email

Be the first to know when new zero-days emerge