Threats tagged 'ghsa-h64g-vgvx-2m8r'

The AK-Nord USB-Server-LXL Firmware v0.0.16 Build 2023-03-13 contains insecure permissions in the /etc/init.d/lighttpd script. This script is executed with root privileges on system boot and during interactions. A locally authenticated user with low privileges can modify this script to execute arbitrary commands with root privileges, leading to a full system compromise.