CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the /api/iodd/config endpoint, allowing high-privileged remote attackers to execute arbitrary commands with root privileges by sending a specially crafted PUT request using admin credentials. This poses a significant risk to affected devices, as it can lead to complete system compromise. Organizations utilizing products with this vulnerability should prioritize immediate remediation to safeguard their systems against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing execution of commands with root privileges on the device.