CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the Ziroom ZHOME A0101 1.0.1.0, specifically affecting the processing of the /api/ZRQos/set_online_client file, where manipulation of the 'mac' argument can be exploited remotely. This critical flaw, with a CVSS score of 9.1, could allow attackers to execute arbitrary commands on the affected system. Organizations using this product should prioritize immediate remediation efforts, especially given the public disclosure of the exploit and the vendor's lack of response.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRQos/set_online_client. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.