Turret

**Name of the Vulnerable Software and Affected Versions** Thinkware U3000 versions prior to 1.02.04 **Description** An issue exists in the TCP Service component where manipulating the `path` argument within the `PUT FILE()` function for the file `/tmp/wpa supplicant.conf` can lead to improper access controls. This flaw allows a remote attacker to bypass security restrictions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict remote access to the TCP Service component.

**Name of the Vulnerable Software and Affected Versions** Thinkware U3000 versions prior to 1.02.04 **Description** Improper access controls exist within the TCP Service component. A remote attacker can manipulate the `get file()` function associated with the `/tmp/wpa supplicant.conf` file to gain unauthorized access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Thinkware U3000 versions prior to 1.02.04 **Description** A security flaw in the TCP Service component allows remote information disclosure. This occurs through the manipulation of the `wifi info` argument within the `GET STATUS()` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `GET STATUS()` function within the TCP Service to minimize the risk of exploitation.