Narumi Hirai

The issue is related to a hard-coded credential in Rakuten Casa, which may allow a remote unauthenticated attacker to log in with root privilege and perform arbitrary operations.

The issue allows an attacker with administrative privilege to send a specially crafted request to a specific URL, which may result in arbitrary command execution.

The issue is related to improper validation of an integrity check value in the firmware, which can be exploited by an attacker with administrative privileges to execute malicious programs.