This vulnerability allows an authenticated user to perform command injection via the file upload functionality in Security Center. By uploading a maliciously crafted file, the attacker may execute arbitrary commands on the host OS, potentially compromising confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges, no user interaction, and complete impact on confidentiality, integrity, and availability. There is no information on affected versions or available patches.

Successful exploitation could lead to full system compromise, including arbitrary command execution with the privileges of the vulnerable application. This can result in complete loss of confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable functionality to trusted users only and monitor for suspicious file uploads.