James Loureiro

This issue allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 routers. Authentication is not required to exploit this issue. The specific flaw exists within the tmpServer service, which listens on TCP port 20002. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this issue to execute code in the context of the current process.

This issue allows a firewall bypass on affected TP-Link Archer A7 installations. It does not require authentication to exploit. The flaw exists within the handling of IPv6 connections, specifically due to the lack of proper filtering of IPv6 SSH connections. An attacker can leverage this, potentially in conjunction with other issues, to execute code in the context of root.

This issue allows remote attackers to bypass authentication on affected installations. The specific flaw exists within the handling of SSH port forwarding requests during initial setup, resulting from the lack of proper authentication prior to establishing SSH port forwarding rules. An attacker can leverage this to escalate privileges to resources normally protected from the WAN interface.

This issue allows remote attackers to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists within the handling of Intents, specifically in the ability to send an Intent that would not otherwise be reachable. This can be leveraged to escalate privileges to resources normally protected from the application.

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 2.0.02.31 Description: This issue allows local attackers to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists within the handling of ZIP files, specifically due to the lack of proper validation of a user-supplied path prior to using it in file operations. This allows an attacker to escalate privileges to resources normally protected from the application. Recommendations: For versions prior to 2.0.02.31, update to version 2.0.02.31 or later to resolve the issue. As a temporary workaround, consider restricting the handling of ZIP files until a patch is applied. Avoid using user-supplied paths in file operations to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Samsung Galaxy Apps versions prior to 4.2.18.2 Description: This issue allows local attackers to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists within the handling of a staging mode, specifically in the ability to change the configuration based on the presence of a file in a user-controlled location. This can be leveraged to escalate privileges to resources normally protected from the application. Recommendations: For versions prior to 4.2.18.2, update to version 4.2.18.2 to resolve the issue. As a temporary workaround, consider restricting access to the staging mode to minimize the risk of exploitation.