Security vulnerabilities identified in Inteno routers and Pixel 9 devices

Security researchers have identified critical vulnerabilities affecting both networking hardware and mobile devices.

In Inteno routers, a misconfiguration in Access Control Lists (ACLs) allows authenticated users to access any file, write new files, and add SSH keys. This flaw enables unauthorized users to gain root access. The vulnerability, assigned CVE-2017-11361 with a CVSSv3 score of 8.8, is exacerbated by default settings where the user password often matches the Wi-Fi key.

Separately, research into the Pixel 9 has highlighted 0-click attack surfaces within the Android ecosystem. Specifically, the Dolby UDC audio decoder is identified as a potential vector because incoming audio messages are transcribed automatically by processes like Google Messages before user interaction. Researchers suggest that removing uncommon decoders from the 0-click attack surface could mitigate risks associated with complex audio formats.