Multiple Siklu EtherHaul devices are prone to a remote command-execution vulnerability.
An attacker can exploit this issue to execute arbitrary commands within the context of the affected application. Failed exploits might result in denial-of-service conditions.
Versions prior to Siklu EtherHaul devices 7.4.0 are vulnerable.
Information
Exploit
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
References: