medium6.5
CVE-2025-27804
Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script.
Impact
Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.