Andreas Kurtz

The issue is related to the Telephony subsystem in Apple iOS, which lacks protection for certain internal data. This can be exploited by a remote attacker using a specially crafted app to gain access to information about completed calls.

The issue allows physically proximate attackers to obtain sensitive information more easily. This is due to CFNetwork relying on the hardware UID for its cache encryption key.

The issue is related to a lack of protection for system data in the CoreAnimation component of the iOS operating system. This can be exploited by a remote attacker using a specially crafted background application to gain access to the clipboard. The exploitation allows attackers to bypass intended IOSurface restrictions and obtain screen-framebuffer access.

The issue allows attackers to read sensitive information, including the telephone number or e-mail address of a recent contact, via a crafted app. This is related to the Sandbox Profiles component.

The issue allows attackers to bypass a sandbox protection mechanism and access unintended telephone capabilities via a crafted app.

The issue concerns the generation of default Wi-Fi passwords in Apple iOS. Specifically, the WifiPasswordController generateDefaultPassword method relies on the UITextChecker suggestWordInLanguage method for selecting Wi-Fi hotspot WPA2 PSK passphrases. This approach results in an insufficient number of possible passphrases, making it easier for remote attackers to obtain access via a brute-force attack.

A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `url` parameter in the login.jsp file of the Admin Console.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `type` parameter in the "sipark-log-summary.jsp" endpoint.

A directory traversal issue in the AuthCheck filter of the Admin Console allows remote attackers to bypass authentication and access the admin interface by including a .. (dot dot) in a URI. This can be achieved by crafting a specific URI sequence, such as /setup/setup-/.., which matches the Exclude-Strings list.

The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the `url` parameter in the login.jsp file.