Threats tagged 'ghsa-434j-26h4-7637'

Deck Mate 2 devices are shipped with static, hard-coded credentials for root shell and web user interface access. Multiple management services including SSH, HTTP, Telnet, SMB, and X11 are enabled by default. Attackers with local or near-local access, such as via USB or Ethernet ports beneath the table, can use these credentials to gain administrative control. This allows modification of firmware and controller software, enabling persistent compromise. Remote attacks via network or cellular links may be possible but generally require additional capabilities or operator error. The vendor has disabled USB access in current firmware versions to mitigate local attack vectors.