VYPR

MOTP

by MOTP

CVEs (1)

  • CVE-2021-44161HigDec 29, 2021
    risk 0.57cvss 8.8epss 0.01

    Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection attack to read, modify or delete backend database without authentication.