Threats tagged 'ghsa-744f-w5rx-cf65'

A critical OS command injection vulnerability exists in the TFTP provisioning module of Zenitel EdgeAudioClient versions before 9.6.3.0 and 10.x before 10.1.3.0. This flaw allows unauthenticated adjacent attackers to execute arbitrary commands as root by supplying a crafted DHCP option 66 value via a rogue DHCP server on the same network segment. The vulnerability affects devices using DHCP on every boot and lease renewal. Additionally, the injection can be triggered through certain configuration fields if an attacker can modify the device configuration.