Modpr0Be

The issue allows remote attackers to read or write arbitrary files via a .. (dot dot) in the (1) get or (2) put commands. This is due to multiple directory traversal vulnerabilities in the TFTP Server.

The BIOS configuration design relies on the main battery, reducing the effectiveness of a protection mechanism that prohibits booting from a USB device. Attackers with physical access to the laptop can exhaust the main battery to reset the BIOS configuration and gain direct access to the hard drive by booting a live USB OS.

The issue allows remote attackers to execute arbitrary code via specific parameters in an lpp project file, including the `author` and `name` parameters inside the INFORMATION tag, the `artist` parameter inside the TRACK tag, or the `default` parameter inside the TEXT tag.