Tan Inn Fung

An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed process.

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.

**Name of the Vulnerable Software and Affected Versions** Palo Alto Networks Prisma Access Browser (affected versions not specified) **Description** The issue is related to an insufficient implementation of cache vulnerability in the browser, which allows users to bypass certain data control policies. This enables users to circumvent specific security measures that are in place. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Prisma Access Browser (affected versions not specified) Description: The issue concerns inappropriate control behavior in the Prisma Access Browser. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NetGuardian DIN Remote Telemetry Unit (RTU) (affected versions not specified) **Description** The issue concerns multiple security vulnerabilities in the web interface of the NetGuardian DIN Remote Telemetry Unit (RTU). Attackers can exploit these vulnerabilities to perform critical actions such as escalating user privileges, stealing user credentials, Cross Site Scripting (XSS), and Cross-Site Request Forgery (CSRF). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Skylab IGX IIoT Gateway (affected versions not specified) **Description** The Skylab IGX IIoT Gateway has a security issue where the limited shell terminal process runs under root privileges, allowing an attacker to read, write, and modify any file in the operating system. This can be achieved by utilizing the limited shell file exec and download functions. An attacker can replace the /etc/passwd file with a new root user entry, enabling them to breakout from the limited shell and login to an unrestricted shell with root access. With root access, the attacker can take full control of the IIoT Gateway. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.