Rik Willems

The issue arises when requesting invalid or non-existing resources via HTTP, triggering the page error handler to retrieve content from another page, leading to recursive application calls that amplify the initial attack's impact until the web server's limits are exceeded.

The Conexus telemetry protocol used in the affected devices does not implement encryption. This allows an attacker with adjacent short-range access to listen to communications, including the transmission of sensitive data.