Husky M10 privilege escalation issue
Issue: An authorized standard user is able to escalate account to administrator level by manipulating client-side parameters in the web browser.
The reason for this is that the parameters are not validated on the server side.
How to fix the issue?
Connect the Husky M10 unit to the Internet.
Within 48 hours the M10 will detect an update available.
The user will be prompted to accept the upgrade.
Husky M10 will download and install the software update.
The unit will automatically reboot and the potential security issue will be eliminated.
Article Number
000002259