Multiple Vulnerabilities Found in Techview LA-5570 Wireless Gateway Home Automation Controller

CVE-2023-34723

Vulnerability Type: Directory Indexing, allows a threat actor to list the contents of specific directories outside of the web root context.

CVE-2023-34724

Vulnerability Type: On-Chip Debug and Test Interface With Improper Access Control, allows a threat actor unrestricted access to the root filesystem using an exposed UART interface, without the need for authentication.

CVE-2023-34725

Vulnerability Type: Incorrect Access Control, allows a threat actor access to sensitive systems configuration files without proper authentication or authorisation.

access access control actor automation chip context control controller cve debug directory exposed filesystem found gateway home home automation interface list netsec root test the web threat threat actor vulnerabilities vulnerability web wireless