Executive brief
RT Systems TM2 Monitoring, a system used for monitoring industrial or technical environments, contains a critical security flaw that allows unauthorized individuals to bypass the login screen. By simply requesting specific internal pages, an attacker can view administrative passwords in plain text and gain full control over the system's settings. This could lead to unauthorized access to sensitive monitoring data, service disruption, or complete takeover of the monitoring infrastructure.
Technical details
An authentication bypass vulnerability exists in RT Systems TM2 Monitoring v3.04 due to improper access control. The application relies on client-side JavaScript to enforce authentication on the login page but fails to verify session state on sensitive server-side components such as 'security.php'. A remote, unauthenticated attacker can bypass the login mechanism by sending a direct HTTP GET request to protected endpoints. The server responds with the full page content, which includes administrative and guest credentials ('pw_admin' and 'pw_guest') stored in plaintext within HTML input fields. This allows for complete compromise of the monitoring system.
Affected products
- RT Systems TM2 Monitoring 3.04
Timeline
- 2025-07-18: disclosed: Vulnerability discovered by researchers
- 2025-10-22: advisory: CVE published to NVD