Administrator takeover via undisclosed authentication bypass

Authentication bypass in Plat'Home OpenBlocks series before FW5.0.8 allows attackers to change the administrator password via an adjacent network. The flaw lies in the FW5 Web UI authentication path, but the vendor has not disclosed which alternate request or channel skips the administrator check. No credentials or user interaction are required from the adjacent network, and successful exploitation gives control of the administrator password.