CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the /api/iodd/config endpoint, allowing high-privileged remote attackers to execute arbitrary commands with root privileges by sending a specially crafted GET request using admin credentials. This poses a significant risk to devices utilizing this endpoint, as it could lead to unauthorized access and control. Organizations using affected products should prioritize remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device.