Max Moser

A vulnerability was found in the Uninstallation Handler component of CrowdStrike Falcon, related to incorrect implementation of the uninstall protection function. This leads to missing authorization, allowing an attacker to remove the software without a valid token. The manipulation can be launched remotely.

A critical issue affects the function `getCurrentDBVersion` in the library `SAMwinLIBVB.dll` of the credential handler, allowing authentication with hard-coded credentials.

A critical issue was found in the Password Handler component, specifically affecting the `passwordScramble` function in the `SAMwinLIBVB.dll` library. This is due to an incorrect implementation of a hashing function, leading to predictable authentication possibilities.

A critical issue has been discovered, allowing unauthenticated remote code execution with root permissions. This is related to the file `/cardo/api` of the Cardo-Updater.

A critical issue has been found in the software, affecting the `getCurrentDBVersion` function in the `SAMwinLIBVB.dll` library of the database handler. This leads to sql injection. The issue has been publicly disclosed and may be exploited.

A problem was found in the certification validation of the mail client. An exploit has been disclosed to the public and may be used.

The issue concerns the Storage and Access service, which fails to enforce password requirements for SMB filesystem access. This allows attackers to read arbitrary files under certain conditions, specifically via sessions over Wi-Fi networks or USB connections when the device is in Development Mode.