Seunghyun Cho

A NULL pointer dereference exists in the `mod heartmonitor` module when used over a unicast listener. This issue can lead to a Denial of Service (DoS), which is a condition where the server becomes unavailable to legitimate users.

The issue is related to an improper authorization vulnerability that allows physical attackers to partially bypass the factory reset protection. This vulnerability can be exploited by physical attackers.

The issue is related to improper access control, allowing a physical attacker to install a package before the completion of the Setup wizard. This can be exploited by a physical attacker.

The issue is related to an Improper Protection of Alternate Path vulnerability in the Setup wizard process. This vulnerability allows a physical attacker to install packages before finishing the Setup wizard.