CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the /api/status/data endpoint, allowing low-privileged remote attackers to execute commands with root privileges by sending a specially crafted GET request containing user credentials. This high-severity flaw poses a significant risk to any affected products, as it could lead to complete system compromise. Organizations utilizing these products should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted GET request with user credentials allowing execution of commands with root privileges on the device.