Chen Jiang

**Name of the Vulnerable Software and Affected Versions** Crane versions prior to SMR Nov-2024 Release 1 **Description** The issue is related to incorrect default permissions, allowing local attackers to access files with phone privilege. **Recommendations** For versions prior to SMR Nov-2024 Release 1, update to SMR Nov-2024 Release 1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SmartManagerCN versions prior to SMR Dec-2023 Release 1 **Description** The issue is related to improper access control, allowing local attackers to access arbitrary files with system privilege. **Recommendations** For versions prior to SMR Dec-2023 Release 1, update to SMR Dec-2023 Release 1 or later to resolve the issue.