Richard Thomas

Uncontrolled Resource Consumption can be exploited to cause the devices to become unresponsive and not accurately update the display content, resulting in a Denial of Service.

The issue allows an attacker to exploit an Open Redirect vulnerability on a website, potentially spoofing the site displayed in the download file dialog. This could make it appear as if the file was downloaded from the original site, rather than the actual site it came from.

A vulnerability has been identified that could allow an attacker to capture plain text communication between the configuration software and the device, potentially gaining access to sensitive information. This is due to unencrypted communication.

The issue concerns the RESTful module for Drupal, where it fails to properly cache pages for authenticated users when non-cookie authentication providers are used. This allows remote attackers to obtain sensitive information.

The issue allows remote attackers to obtain sensitive node titles. This can be achieved through an autocomplete search on custom entities without an access query tag or by leveraging knowledge of the ID of an entity.