This vulnerability affects the U-Boot bootloader in GNCC GP5 version 7.1.76. An attacker physically near the device can interrupt the boot process and insert a specially crafted string into the kernel boot arguments, bypassing authentication mechanisms and obtaining root privileges. The issue arises from insufficient validation of boot arguments during early system initialization. No CVSS score or patch information is currently provided, and no known exploits have been observed in the wild.

Successful exploitation results in unauthorized root access to the affected device, potentially allowing full control over the system. Because the attack requires physical proximity and interaction during the boot sequence, remote exploitation is not feasible. The lack of an official patch or mitigation increases risk until a fix is available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict physical access to affected devices and monitor for vendor updates. No vendor advisory or official remediation guidance is currently available.