The SSH service in Cellopoint CelloOS suffers from an improper access control vulnerability (CWE-1284) that permits authenticated remote attackers to circumvent enforced command restrictions. This enables execution of operating system commands beyond the originally authorized scope. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. No remediation level or patches have been provided at this time, and no known exploits are reported in the wild.

Authenticated remote attackers can bypass SSH command restrictions to execute arbitrary operating system commands outside their authorized scope. This can lead to unauthorized system control, data compromise, or service disruption. The high CVSS score reflects significant potential impact on confidentiality, integrity, and availability of affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict SSH access to trusted users only and monitor for suspicious activity related to command execution. Avoid exposing vulnerable SSH services to untrusted networks.