CyberRota Analysis
AI-GeneratedA command injection vulnerability in the /index.php/ajax/parameterManage endpoint allows low-privileged remote attackers to execute commands with root privileges by exploiting user credentials. This high-severity flaw poses a significant risk to any affected products, enabling unauthorized access and potential system compromise. Organizations utilizing these products should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage endpoint using user credentials allowing execution of commands with root privileges on the device.