Vendor
Kener versions 3.0.0 through 4.1.9 contain an authentication bypass vulnerability allowing attackers to forge administrative session tokens using a hardcoded fallback secret.