Affected devices do not contain an Immutable Root of Trust in Hardware

The login endpoint /FormLogin in affected web services does not apply proper origin checking

Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page

Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page

Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page

Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page

Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page

The login functionality of the web server in affected devices does not normalize the response times of login attempts

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device

The web server of affected devices does not properly validate input that is used for a user redirection