Simone Bossi and Raffaele Bova at Nozomi Networks

A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.

A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.

A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.