Multiple OS command injection vulnerabilities exist in the device firmware within the /var/salia/mqtt.php script. An attacker can publish a specially crafted MQTT message to a specific topic, resulting in arbitrary OS command execution with root privileges. The CVSS 3.1 base score is 6.5, indicating a medium severity vulnerability.