CyberRota Analysis
AI-GeneratedA local file inclusion vulnerability exists in the /index.php/ajax/save_iodd_parameters endpoint, which can be exploited by low-privileged remote attackers with a valid operator cookie to execute arbitrary PHP code on the affected device. This poses a significant risk of unauthorized access and control over the system. Organizations utilizing the impacted products should prioritize remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device.