Zuoyuanp

O aplicativo de gerenciamento web Waybox Enel X possui uma falha que permite a execução de solicitações arbitrárias no banco de dados interno por meio do endpoint `/admin/versions.php`. Este problema afeta versões específicas do Waybox.

A use-after-free issue exists due to improper data tracing. This can be triggered by calling the function `nni mqtt msg get publish property()` in the file `mqtt msg.c`, potentially allowing an attacker to cause a denial of service attack.

A memory leak issue exists in the file message.c, which could be exploited by an attacker to cause a denial of service attack by consuming all available memory resources.