Trustwave Secure Web Gateway
The issue is related to errors in cryptographic key management. It allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access. This can be achieved via the `publicKey` parameter to the "/sendKey" URI.