Shopify: The POS Firmware is leaking the root Password which can be used for unauthorized access to the device.
The Shopify Point of Sale application is compatible with a new EMV card reader from Miura. The researcher discovered that the firmware for this device contains a wifi password configured in wpasupplicant presumably used during factory tests. However, due to the absence of wifi interface on the...