Thinkware U3000 vulnerabilities

A security flaw has been discovered in Thinkware U3000 up to 1.02.04 in the GET_STATUS function of the TCP Service component. Manipulating the wifi_info argument results in information disclosure, and the attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

A vulnerability was determined in Thinkware U3000 up to 1.02.04 affecting the PUT_FILE function in /tmp/wpa_supplicant.conf of the TCP Service component. Manipulation of the path argument can lead to improper access controls.

A vulnerability was identified in Thinkware U3000 up to 1.02.04 in the get_file function of /tmp/wpa_supplicant.conf in the TCP Service component. The manipulation leads to improper access controls, and remote exploitation is possible. The exploit is publicly available and might be used.