CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the /api/status/data endpoint, allowing high-privileged remote attackers to execute arbitrary commands with root privileges by sending a specially crafted DELETE request using admin credentials. This poses a significant risk to devices utilizing this API, as it could lead to unauthorized access and control over the affected systems. Organizations using products that incorporate this API should prioritize remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted DELETE request with admin credentials allowing execution of commands with root privileges on the device.