Singularitysec

The issue allows for Remote Code Execution via unauthenticated requests to PHP scripts.

The issue concerns a problem where an attacker can execute malicious scripts. The estimated number of potentially affected devices worldwide is not specified. Details about real-world incidents where this issue was exploited are not provided. Technical details about exploitation include the API endpoint /network diagnostics.html or /storage info.html, and the vulnerable parameter `REF`.

The issue allows renaming and modifying files via the "/tools.html" API endpoint.

The issue allows directory traversal via the "/storage.html" API endpoint, specifically through the `rp` parameter. This enables an attacker to read or write to files.

The issue concerns weak permissions set by the installer for the connectgdll.exe program, allowing local users to execute arbitrary code by modifying this program.

The issue concerns weak permissions for certain service files, specifically `Pfx.Engagement.WcfServices`, `PFXEngDesktopService`, `PFXSYNPFTService`, and `P2EWinService`, which are set to allow Authenticated Users to modify and write. This weakness can be exploited by local users to gain LocalSystem privileges through the use of a Trojan horse file.