Luiz Angelo Daros De Luca

The issue concerns the /usr/sbin/pinger binary packaged with squid, which had `squid:root` and `0750` permissions. This allowed an attacker who compromised the squid user to gain persistence by modifying the binary.

The issue concerns a hardcoded SSH key used for encrypting communication data and authenticating different nodes of the devices. An attacker may obtain the hardcoded keys and log in to the device through SSH.

The issue allows attackers with administrator privilege to inject a command into specific command parameters and run the injected command with root privilege.