This vulnerability (CVE-2024-47944) allows unauthenticated attackers to execute arbitrary code on the affected device by placing specially crafted .patch firmware upgrade files on a USB stick. The device executes these files directly without any authentication in the admin interface, leading to critical risk of full system compromise.