> To trigger this issue, the attacker must be on the local network [...]