For informational purposes only

According to the seller, the exploit enables remote code execution without requiring authentication. Exploitation is possible with no user interaction — a vulnerable host is sufficient.

Vulnerability type: preauth RCE
Privileges obtained: root
Price: 15K$

A seller markets a pre-authentication remote code execution exploit requiring zero user interaction, granting root privileges on vulnerable hosts, with a price of fifteen thousand dollars.

Sale of 0-day vulnerability in IP-ATC (PBX) software