CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files endpoint, allowing low-privileged remote attackers to execute commands with root privileges by exploiting operator credentials. This high-severity flaw poses a significant risk to devices utilizing this endpoint, enabling unauthorized access and control. Organizations using affected products should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files endpoint using operator credentials allowing execution of commands with root privileges on the device.