Tom Chothia

An untrusted pointer dereference in the Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to locally bypass a security feature.

The issue allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle (MITM) position. The root cause is that the client module accepts TLS messages that normally are only sent to TLS servers.

Uncontrolled Resource Consumption can be exploited to cause the devices to become unresponsive and not accurately update the display content, resulting in a Denial of Service.

The issue allows an attacker to exploit an Open Redirect vulnerability on a website, potentially spoofing the site displayed in the download file dialog. This could make it appear as if the file was downloaded from the original site, rather than the actual site it came from.

A vulnerability has been identified that could allow an attacker to capture plain text communication between the configuration software and the device, potentially gaining access to sensitive information. This is due to unencrypted communication.

The Conexus telemetry protocol used in the affected devices does not implement encryption. This allows an attacker with adjacent short-range access to listen to communications, including the transmission of sensitive data.