Vulnerabilities in Ledger SAS software