Cumhur Kizilari

**Name of the Vulnerable Software and Affected Versions** Vestel AC Charger version 3.75.0 **Description** The issue allows an attacker to access files containing sensitive information, such as credentials, which could be used to further compromise the device. This vulnerability could enable remote access to sensitive files. The vulnerability was reported by Cumhur Kizilari to CISA. **Recommendations** For Vestel AC Charger version 3.75.0, consider restricting access to sensitive files until a patch is available. As a temporary workaround, avoid using the charger until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Dingtian DT-R0 Series (affected versions not specified) Description: The Dingtian DT-R0 Series is vulnerable to an exploit that allows attackers to bypass login requirements by directly navigating to the main page. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VITEC AvediaServer (Model avsrv-m8105) version 8.6.2-1 **Description** The issue allows a remote attacker to escalate privileges via a crafted script. This is due to an Insecure Permissions vulnerability. **Recommendations** For VITEC AvediaServer (Model avsrv-m8105) version 8.6.2-1, consider restricting access to the system until a patch is available to prevent privilege escalation. As a temporary workaround, review and secure any scripts that may be used to exploit this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.