CyberRota Analysis
AI-GeneratedA critical command injection vulnerability exists in the Ziroom ZHOME A0101 1.0.1.0, specifically affecting the /api/ZRQos/set_online_client endpoint due to improper handling of the 'ip' argument. This flaw allows remote attackers to execute arbitrary commands on the affected system, posing a significant risk to the integrity and confidentiality of the environment. Organizations using this product should prioritize immediate remediation efforts to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/set_online_client. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.