The scanner device boots into a kiosk mode by default, launching the Scan2Net interface in a browser running with root user permissions. Several other applications also run as root. This configuration can be verified by checking running processes as root. The vulnerability has a CVSS score of 6.1, indicating a medium severity risk.