Alpine Halo9 Missing Authentication Information Disclosure Vulnerability

A vulnerability in Alpine Halo9 devices allows remote attackers to disclose sensitive information. The issue arises from the DLT interface, which by default listens on TCP port 3490. The vulnerability is due to the absence of authentication before granting access to certain functionalities. This flaw can be exploited in conjunction with other vulnerabilities to execute arbitrary code on the device.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure and potentially allow for arbitrary code execution on the affected device.