The vulnerability arises from improper link resolution in the mv, cp, and rm file utilities within the EXOS shell environment. These utilities fail to safely canonicalize file paths and follow symbolic links that point outside the intended privilege boundaries. An attacker with low-privilege CLI access can create symbolic links to privileged filesystem locations and use these utilities to read, modify, or replace security-critical files. This flaw can enable escalation to root privileges and persistent modification of the device's software stack. The vulnerability affects EXOS versions 32.0.0, 33.0.0, and 33.2.0. Exploitation is possible remotely or locally. There is no vendor advisory or patch information currently available.

An attacker with low-privilege CLI access can exploit this vulnerability to read, modify, or replace security-critical files outside their authorized scope by abusing symbolic link handling in file utilities. This may lead to escalation to root-level access and persistent compromise of the device software stack. The vulnerability affects device confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict low-privilege CLI access to trusted users only and monitor for suspicious symbolic link creation or file utility usage. Avoid using affected versions in sensitive environments if possible.