Raffaele Bova

An unauthenticated attacker can exploit a stack-based buffer overflow—a condition where a program writes more data to a buffer located on the stack than it can hold—within the password functionality. This occurs when the SafeEnhancement feature is enabled, potentially leading to arbitrary code execution.

An authenticated attacker can exploit a stack-based buffer overflow within the upload functionality to achieve code execution. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory.

An unauthenticated attacker can exploit a stack-based buffer overflow—a condition where a program writes more data to a buffer located on the stack than it can hold—within the Cookie parsing methods. This occurs when the SafeEnhancement feature is enabled, potentially leading to arbitrary code execution.

An unauthenticated attacker can exploit a stack-based buffer overflow—a condition where a program writes more data to a buffer located on the stack than the buffer can hold—within the log message functionality to achieve remote code execution.

A command injection flaw exists during the firmware upgrade file verification process. Successful exploitation allows an attacker to execute arbitrary commands on the system.

The netclient and factory services are susceptible to brute-force cracking of credentials. This allows an attacker on the same local network to intercept traffic between the Hub and associated cameras to compromise the credentials of the connected cameras.

The use of hard-coded credentials allows for a malicious manual software update.

An improper neutralization of special elements used in an SQL command ('SQL Injection') issue exists in Microchip Time Provider 4100. This allows for SQL Injection. The vulnerability is present in the web resource. The `SQL` command is not properly sanitized, potentially allowing an attacker to inject malicious code.

An improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Microchip Time Provider 4100. This allows for OS Command Injection. The issue relates to restoring the configuration password.

An improper neutralization of special elements used in an OS command vulnerability exists in Microchip Time Provider 4100, allowing for OS command injection. This issue relates to remote code execution through the backup configuration password.

A flaw exists in Microchip Time Provider 4100 that permits malicious manual software updates due to a missing integrity check during code download.