Sacha Kozma

Exposure of sensitive functionality to an unauthorized actor allows remote attackers to set a specific configuration.

The use of a broken or risky cryptographic algorithm in Smart Switch allows remote attackers to configure a downgraded scheme for authentication.

Improper verification of a cryptographic signature in Smart Switch allows remote attackers to potentially bypass authentication.

A flaw exists in authentication within Smart Switch that enables remote attackers to circumvent security measures. This issue allows unauthorized access, potentially compromising system integrity.

An authentication bypass by replay exists in Smart Switch, potentially allowing remote attackers to trigger privileged functions.

An improper access control issue exists in Galaxy Store. A local attacker can create a file with Galaxy Store privileges.

A path traversal issue exists in Galaxy Store versions prior to 4.6.03.8. This allows a local attacker to create a file with Galaxy Store privileges.

A flaw exists in the Galaxy Store application related to the improper verification of cryptographic signatures. This issue allows a local attacker to install arbitrary applications.

A flaw exists in authentication within Smart Switch that could allow an attacker in close proximity to cause a denial of service.

A path traversal issue exists in Smart Switch. This allows attackers with adjacent network access to overwrite arbitrary files with Smart Switch privileges.