Michaå Majchrowicz

**Name of the Vulnerable Software and Affected Versions** Hackney versions prior to 1.24.0 **Description** The issue arises from Hackney's failure to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. This allows remote attackers to exhaust connection pools, resulting in denial of service in applications that use the library. **Recommendations** For versions prior to 1.24.0, update to version 1.24.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Smartwares cameras versions up to 3.3.0 **Description** The issue concerns command injection during the initialization process of the cameras. When a user provides Access Point credentials through a mobile app, the input is not properly sanitized, allowing for command injection. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. The vendor has not replied to reports, so the patching status remains unknown. **Recommendations** For versions up to 3.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Smartwares cameras versions up to 3.3.0 **Description** The issue concerns the sharing of the same credentials for the telnet service among Smartwares cameras, including models CIP-37210AT and C724IP, which run firmware versions up to 3.3.0. An attacker with physical access to the SPI connected memory can retrieve the hash of the password. The telnet service is enabled when a specific folder is created on the inserted SD card. The patching status and the range of affected devices and firmware versions remain unknown due to the vendor's lack of response. It is also possible that newer firmware versions may be vulnerable. **Recommendations** For versions up to 3.3.0, consider disabling the telnet service as a temporary workaround until the patching status is confirmed. Restrict access to the SPI connected memory to minimize the risk of exploitation. Avoid using the affected firmware versions until the vendor provides a fix or confirmation of the patching status. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Smartwares cameras versions up to 3.3.0 **Description** The issue allows for path traversal attacks, enabling access to sensitive information by manipulating file paths. When connected to a mobile app, affected devices open port 10000, allowing users to download pictures by providing specific file paths. However, the directories accessible to users are not properly restricted, facilitating the path traversal attacks. The vendor has not responded to reports, and the patching status is unknown. **Recommendations** For versions up to 3.3.0, as a temporary workaround, consider restricting access to port 10000 when not in use, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Kentico CMS version 7 **Description** The issue is a Reflected XSS attack that occurs through the manipulation of a specific GET request parameter sent to the "/CMSMessages/AccessDenied.aspx" endpoint. Support for Kentico CMS version 7 ended in 2016. It is noted that version 8 does not contain this issue. **Recommendations** For Kentico CMS version 7, as support has ended and this version is vulnerable, consider upgrading to a supported version to mitigate the risk. As a temporary workaround, consider restricting access to the "/CMSMessages/AccessDenied.aspx" endpoint until a more permanent solution can be applied. Avoid using the vulnerable GET request parameter in this endpoint to minimize the risk of exploitation.