The vulnerability of the DSS microprogramming system’s thermostat control service allows a intruder to execute arbitrary code.

The vulnerability of the DSS microprogramming system for ComfortLink II arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, using a long REG query...