Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure.