This vulnerability involves improper neutralization of special elements used in OS commands within Contec FX series devices. Successful exploitation requires attacker login and allows arbitrary OS command execution, potentially leading to full compromise of the affected device. The CVSS 3.1 score of 8.8 reflects network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability.

If exploited, an attacker with login privileges can execute arbitrary OS commands on the affected Contec FX devices, potentially leading to full system compromise, data loss, or disruption of service. The high CVSS score indicates significant impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Until a fix is available, restrict login access to trusted users only and monitor for suspicious activity.