Jake Valletta

The issue concerns potential security vulnerabilities, including compromise of integrity and allowed communication with untrusted clients.

A security issue has been identified in the HP Support Assistant software, potentially compromising its integrity and allowing communication with untrusted clients.

The issue is related to the bypass of authentication via spoofing, allowing a remote attacker to compromise IoT devices and gain unauthorized access to protected information. An attacker can impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID), potentially resulting in the hijacking of a victim's connection and forcing them to supply credentials needed to access the victim TUTK device. It is estimated that 83 million devices connected to the Kalay network are at risk. The vulnerability can be exploited to gain access to streaming video and audio, compromise home networks and credentials, and create botnets from compromised devices.

Name of the Vulnerable Software and Affected Versions: Grandstream GRP261x VoIP phone version 1.0.3.6 (Base) Description: The issue allows Command Injection as root in the administrative web interface of the Grandstream GRP261x VoIP phone. Recommendations: For Grandstream GRP261x VoIP phone version 1.0.3.6 (Base), at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: Grandstream GRP261x VoIP phone version 1.0.3.6 (Base) Description: The issue allows for authentication bypass in the administrative web interface of the Grandstream GRP261x VoIP phone. Recommendations: For Grandstream GRP261x VoIP phone version 1.0.3.6 (Base), at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Tesla SolarCity Solar Monitoring Gateway versions through 5.46.43 Description: The issue is related to the use of hard-coded credentials. Specifically, Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the `python` user account. Recommendations: For Tesla SolarCity Solar Monitoring Gateway versions through 5.46.43, consider removing or securely storing the hard-coded credentials in the .pyc file used by Digi ConnectPort X2e to mitigate the risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows an attacker to escalate privileges from the python user to root via a symlink attack that uses chown, related to /etc/init.d/S50dropbear.sh and the /WEB/python/.ssh directory.

The administrative interface of the affected appliances is susceptible to authenticated remote code execution, which can result in server compromise.

The issue is related to a lack of proper validation of upstream interface names in the tethering controller, which can be exploited by attackers to bypass intended access restrictions. This can be achieved via a crafted application, allowing a remote attacker to circumvent existing access limitations.