Anyone with a Multitech Conduit LoRaWan gateway experience ? I have one, quite old, to put my hands on it, and then made it part of a public network (as #thethingsnetwork)
#multitech #lorawan #gateway

It connected to my router, but I can't join it by HTTP. I have access to the debug port, but not yet to the command line. Available documentation seems far more recent than my version (firmware 3 at least 10 years old?)

My repaired MultiTech Micro-Professor MPF-I Z80 computer from around 1981. After checking it found that the EEPROM required reprogramming – now works perfectly. MultiTech later became Acer.

#VintageComputer #100DaysOfCode #MultiTech #Z80 #Acer

https://en.wikipedia.org/wiki/Micro-Professor_MPF-I

[26/06/2021]

The #usdHeroLab analysts examined the application #MultiTech Conduit AP MTCAP2-L4E1 while conducting their security analyses.
1⃣ Vulnerability Type: cross-site request forgery attacks (CSRF)
🚨Security Risk: High
👇​ More details

🧐MultiTech Conduit AP MTCAP2-L4E1 is a LoRaWAN access point to provide connectivity of IoT assets. The webinterface allows configuration of settings like user management, LoRaWAN, Firewall and custom applications.

The vulnerability can be used to perform actions on other users behalf which may result in remote code execution.

The vulnerability was reported to the vendor under the Responsible Disclosure Policy and subsequently fixed for #moresecurity. More information can be found here 👨‍💻​👩‍💻​👇
https://herolab.usd.de/en/security-advisories/usd-2023-0004/