Syss Gmbh

**Name of the Vulnerable Software and Affected Versions** Device (affected versions not specified) **Description** An unauthenticated local attacker can decrypt the device's configuration file due to a weak implementation of the encryption used, potentially compromising the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Remote Service Portal (affected versions not specified) **Description** An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection loss. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication. This issue allows a remote attacker to run OS commands through UDP without needing authentication. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** The devices contain two hard-coded user accounts with hardcoded passwords, allowing an unauthenticated remote attacker to gain full control of the affected devices. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Admin Columns WordPress plugin Free versions prior to 4.3.2 Admin Columns WordPress plugin Pro versions prior to 5.5.2 **Description** The issue allows configuration of individual columns for tables, with a column type of "Custom Field" enabling the choice of an arbitrary database column to display in the table. However, there is no escaping applied to the contents of "Custom Field" columns. **Recommendations** For Admin Columns WordPress plugin Free versions prior to 4.3.2, update to version 4.3.2 or later. For Admin Columns WordPress plugin Pro versions prior to 5.5.2, update to version 5.5.2 or later.