Stephen Hilt

Name of the Vulnerable Software and Affected Versions: JUUKO K-800 versions prior to numbers ending ...9A Description: The issue allows attackers to perform a replay attack and command forgery, potentially enabling them to replay commands, control the device, view commands, or cause the device to stop running. Recommendations: For JUUKO K-800 versions prior to numbers ending ...9A, update the firmware to a version with numbers ending ...9A or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: JUUKO K-808 versions prior to numbers ending ...9A, ...9B, ...9C, etc. Description: The issue allows remote attackers to execute commands on vulnerable installations of the equipment. No authentication is required to exploit this issue. The flaw lies in the handling of data between the transmitter and receiver. By using a fixed control code used for encoding data transmitted over radio frequency, an attacker can spoof unauthorized commands to the receiver. This can be used to send commands to physical equipment controlled by the device. Recommendations: For versions prior to numbers ending ...9A, ...9B, ...9C, etc., consider restricting access to the device until a patch is available. As a temporary workaround, avoid using the fixed control code for encoding data transmitted over radio frequency until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Hetronic Nova-M versions prior to r161 **Description** The issue allows for unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state due to the use of fixed codes that can be reproducible by sniffing and re-transmission. **Recommendations** For versions prior to r161, update to version r161 or later to resolve the issue. As a temporary workaround, consider implementing additional authentication or encryption mechanisms to prevent sniffing and re-transmission of commands. Restrict access to the system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SAGA1-L8B versions prior to A0.10 **Description** The issue allows for a replay attack and command forgery. **Recommendations** For versions prior to A0.10, update the firmware to version A0.10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Telecrane F25 Series Radio Controls versions prior to 00.0A **Description** The issue concerns the use of fixed codes in the Telecrane F25 Series Radio Controls, which can be reproduced by sniffing and re-transmission. This allows for unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state. **Recommendations** For versions prior to 00.0A, update to version 00.0A or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SAGA1-L8B versions prior to A0.10 **Description** The issue allows an attacker to force-pair the device without human interaction, potentially leading to remote code execution. **Recommendations** For versions prior to A0.10, update the firmware to version A0.10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SAGA1-L8B versions prior to A0.10 **Description** The issue allows an attacker with physical access to the product to potentially reprogram it. **Recommendations** For versions prior to A0.10, update the firmware to version A0.10 or later to resolve the issue.