The vulnerability of the microprogramming software of Alpha Innotec and Novelan heat pumps allows a hacker to gain full access to the device.

The vulnerability of Alpha Innotec and Novelan thermal pump microprogramming systems is related to the use of pre-set configuration data in the wp2reg-V3.88.0-9015 file. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the device by using...