Unauthenticated privilege escalation via default administrator credentials

Use of a default password in CMSV6 7.31.0.2 through 7.32.0.3 allows remote attackers to obtain administrator privileges. The StandardApiAction_login.action endpoint accepts the built-in admin account with the password admin and returns an authenticated administrator session. Network access to the web interface is sufficient; successful login exposes the platform's monitoring and administrative functions.