Byron Guernsey

**Name of the Vulnerable Software and Affected Versions** Xiiaozet LK100Wt (affected versions not specified) **Description** An authentication weakness exists within an administrative service that allows an attacker to bypass access controls. This flaw enables unauthorized interaction with privileged functionality and can lead to command execution and complete device compromise. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Xiiaozet LK100W (affected versions not specified) **Description** The web-based management interface allows an authenticated attacker to perform OS command injection. This occurs when the system fails to properly sanitize input, allowing the execution of arbitrary operating system commands with elevated privileges. This could lead to unauthorized access to sensitive information or complete compromise of the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Xiiaozet LK100W (affected versions not specified) **Description** A critical management function can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. This may permit unauthorized access and allow attackers to take full control of the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.