early signals ZDI published

ZDI-26-825: (0Day) (Pwn2Own) Alpine iLX-F511 diagapp Command Injection Vulnerability

// AI summary

Alpine iLX-F511 devices have a Command Injection vulnerability (ZDI-26-825) allowing physically present attackers to execute arbitrary code without authentication.

// from the source

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8.
Read at zerodayinitiative.com ↗ More from ZDI published

# more from ZDI published

  1. ZDI published infra

    ZDI-26-839: MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability

    zerodayinitiative.com
  2. ZDI published infra

    ZDI-26-840: MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability

    zerodayinitiative.com
  3. ZDI published infra

    ZDI-26-841: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability

    zerodayinitiative.com
  4. ZDI published infra

    ZDI-26-842: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability

    zerodayinitiative.com
  5. ZDI published infra

    ZDI-26-843: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability

    zerodayinitiative.com