Matt Bergin

The issue concerns the use of hardcoded key material within the executable code and encrypted files of the Cellebrite UFED physical device. This key material is the same for every device running the same version of the software and does not appear to change with new builds. As a result, it is possible to reconstruct the decryption process using this hardcoded key material, allowing for easy access to otherwise protected data.

Name of the Vulnerable Software and Affected Versions: Silicon Integrated Systems XGI WindowsXP Display Manager version 6.14.10.1090 Description: The issue allows local users to gain privileges through a crafted 0x96002404 IOCTL call. Recommendations: For version 6.14.10.1090, consider restricting access to the IOCTL call 0x96002404 until a patch is available.

The issue is related to an insecure default configuration setting for the embedded MySQL database, which allows MySQL users to have read/write access to the file system.

The issue is caused by a misconfiguration in the /etc/sudoers file, leading to an improper authorization.

The issue allows an authenticated user to execute arbitrary commands.

The issue allows remote authenticated users to read arbitrary files via crafted parameters.

The issue allows remote authenticated users to execute arbitrary commands via crafted web-application parameters.

The issue allows local users to obtain sensitive information by leveraging CLI access due to hardcoded database credentials.

The issue allows local users to gain privileges by writing to arbitrary physical memory locations. This is achieved via a specific IOCTL call, `0x0022201c`.

The issue allows local users to gain privileges by writing to arbitrary physical memory locations. This is achieved via a specific ioctl call, `0x00000ffd`.

The issue allows local users to gain privileges through crafted IOCTL calls, specifically (1) 0x96002400 or (2) 0x96002404.