The issue allows a local attacker to escalate privileges via the password reset function. It is described as an Insecure Permissions vulnerability, enabling unauthenticated privilege escalation. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.