The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-38279
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19