Thomas Roth

The issue is related to a U-Boot shell vulnerability that results in privilege escalation in a production device.

The issue is related to a bug in u-boot that allows for access to the u-boot shell and interrupt over UART. This is caused by a buffer overflow in memory. An attacker could exploit this to bypass secure boot mechanisms.

A privacy issue existed in the handling of Contact cards due to inadequate state management, potentially allowing a malicious application to access information about a user's contacts.

The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information, and consequently execute arbitrary code, via a crafted certificate. This is possible because devices do not verify X.509 certificates from SSL servers.

An issue was discovered where an SSH server exists with a hardcoded `vobot` account that has root access.

An issue allows man-in-the-middle attackers to execute arbitrary code by exploiting the use of cleartext HTTP to download a breakout program. This can be achieved by watching for a local user to launch the Breakout Easter Egg feature and then sending a crafted HTTP response.

The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via the WebFTP Overview "Create new directory" field or the body of an e-mail autoresponder message.