B0Ldfrev

The issue is related to insufficient validation of user-supplied input in the web-based management interface of the affected devices. This could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying Linux operating system of an affected device. To exploit this issue, an attacker would need to have valid Administrator credentials on the affected device. The attacker could exploit the issue by sending malicious input to an affected device, potentially allowing the execution of arbitrary commands.

A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. This is due to insufficient user input validation. An attacker could exploit this by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device using root-level privileges. Due to the nature of the vulnerability, only commands without parameters can be executed.