Martin Schobert

The issue allows physically proximate attackers to obtain sensitive information, such as hotel invoice content with personally identifiable information (PII), and potentially create unauthorized room keys, by entering a guest-search quote character and then accessing the underlying Windows OS. This affects the Ariane Duo kiosk mode. The vulnerability exposes the personal data of hotel guests, posing a significant risk to privacy. It is estimated that over 3,000 hotels are affected.

An issue was discovered in the `tarExtract` function, which implements TAR file extraction and processes files within an archive that have relative or absolute file paths. This could lead to unexpected and undocumented behavior, resulting in a directory traversal and associated unexpected behavior. A developer using the `tarExtract` function may expect that the function will strip leading slashes from absolute paths or stop processing when encountering relative paths that are outside of the extraction path, unless otherwise forced. The vulnerability may allow a remote attacker to execute arbitrary commands by injecting a malicious tar file.

An issue in the CPIO command of Busybox allows attackers to execute a directory traversal.

The issue is related to the validation of OpenSSL certificates. The default SSL context with the SSL library did not check a server's X.509 certificate, instead accepting any certificate. This could result in the disclosure of mail server credentials or mail contents when the client connects to an attacker in a MITM position.

Sydent is an identity server for the Matrix communications protocol. If configured to send emails using TLS, Sydent does not verify SMTP servers' certificates, making its emails vulnerable to interception via a man-in-the-middle (MITM) attack. Attackers with privileged access to the network can intercept room invitations and address confirmation emails. This issue is patched in Sydent 2.5.6. When patching, ensure that Sydent trusts the certificate of the server it is connecting to, which should happen automatically when using properly issued certificates. Those who use self-signed certificates should copy their Certification Authority certificate or their self-signed certificate to the trust store of their operating system.

The issue is related to Cross Site Request Forgery (CSRF), which is a type of attack that tricks a user into performing unintended actions on a web application.

The issue allows restricted users to have read access to administrator credentials due to incorrect access control.

The issue concerns Incorrect Access Control, where restricted users have access to other users' outlets.

The issue is related to a denial of service (DOS). No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue concerns Incorrect Access Control, where the device allows unauthenticated access to Event Notification configuration.

The issue is related to insufficient protection of registration data in the web interface of the Aten PE8108 power distribution unit (PDU) software. This allows for unauthenticated access to Telnet and SNMP credentials. An attacker can exploit this issue remotely to gain access to these credentials.

A problem was found in the certification validation of the mail client. An exploit has been disclosed to the public and may be used.

An improper input validation issue allows remote attackers to execute arbitrary commands.

The issue concerns the MySQL "root" user in the affected software, which does not have a password set. This allows local users to access databases on the system.

The issue concerns multiple hardcoded credentials.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `fileName` parameter in the "ajax cmd.php" file.

The issue concerns the Storage and Access service, which fails to enforce password requirements for SMB filesystem access. This allows attackers to read arbitrary files under certain conditions, specifically via sessions over Wi-Fi networks or USB connections when the device is in Development Mode.

The issue is related to a stack-based buffer overflow in the receive tcppacket function in net packet.c. This can be exploited by remote authenticated peers to cause a denial of service or possibly execute arbitrary code via a large TCP packet. Multiple vulnerabilities in the tinc package may lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited by a remote attacker who has passed the authentication procedure.