This vulnerability affects multiple DrayTek VigorSwitch models, specifically the G2540xs. The root cause is improper neutralization of special elements in the usescript, usefile, and option fields before command execution within the jsonstatus function. An attacker who has valid administrative credentials can exploit this flaw remotely through crafted input to execute arbitrary OS commands with root privileges on the device. The CVSS 4.0 base score is 8.6, indicating high severity. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

Successful exploitation allows an attacker with administrative access to execute arbitrary commands on the device with root privileges, potentially leading to full device compromise. This could affect device availability, confidentiality, and integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, ensure that administrative credentials are tightly controlled and access to the web management interface is restricted to trusted networks and users.