This vulnerability (CWE-77) arises from improper neutralization of special elements in the CHARX SEC-3150 device, enabling an unauthenticated remote attacker to inject arbitrary commands into the system configuration. These commands are executed with root privileges, leading to a critical security risk. The CVSS 4.0 base score is 9.3, reflecting the high impact and ease of exploitation. The affected version is exactly 1.0.0. No official patch or remediation level has been provided by the vendor as of the published date.

Successful exploitation allows an unauthenticated attacker to execute arbitrary commands as root on the affected device, leading to full system compromise. This can result in unauthorized control, data manipulation, or disruption of device operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the device to trusted sources only and monitor for suspicious activity. Avoid exposing the device to untrusted networks.