ST Engineering iDirect iQ-Series Terminals (Update A)

ST Engineering iDirect has released patches to address several critical vulnerabilities in its iQ-Series Terminals (Update A). These vulnerabilities include unauthorized access to device information, denial-of-service attacks, and local privilege escalation. Exploitation could allow an attacker to steal device credentials, reboot devices remotely, and extract sensitive configuration data, including SSH and web account passwords. The vulnerabilities affect various iQ-Series terminals and require users to update to version 4.5.3.0 or later.