A critical authentication bypass vulnerability in Gigatech PDV5701 firmware allows unauthenticated remote attackers to gain full administrative control over the device.

The device suffers from a missing authentication vulnerability in its WebSocket management interface, specifically at the /getparameter endpoint. An unauthenticated remote attacker can query this endpoint to receive sensitive system configuration, including administrator usernames and plaintext passwords.

The exploitation of this vulnerability results in a total compromise of the affected device. Successful attackers can obtain administrative credentials, allowing them to modify system configurations, manage user accounts, upload malicious firmware, or trigger device-specific functions like opening doors or resetting the unit. Given the CVSS score of 10.0, this represents a critical risk that could lead to unauthorized physical access if the device controls entry systems, as well as significant reputational and operational damage.

Immediate Action: Since no official patch is currently available, immediately isolate the affected Gigatech PDV5701 devices from the public internet by placing them behind a robust firewall or within a restricted management VLAN.

Proactive Monitoring: Review device access logs and network traffic for suspicious WebSocket connections to the /getparameter endpoint or unusual administrative logins.

Compensating Controls: Implement a Web Application Firewall (WAF) or an application-layer proxy that can block or inspect WebSocket traffic to prevent unauthorized access to the management endpoints.

Public Exploit Available: Yes — a published proof-of-concept exists (referenced in the researcher's write-up at the provided GitHub issue).

This is a critical vulnerability that poses an immediate risk of administrative takeover. Because the vendor has not yet provided a firmware patch, organizations must prioritize network-level isolation of all exposed PDV5701 units. Administrators should treat any device currently accessible via the internet as already compromised and initiate password rotation for all administrative accounts once a remediation path is established.