CyberRota Analysis
AI-GeneratedThe TDDP module of Deco BE11000 devices is vulnerable to an OS command injection, enabling adjacent network attackers to execute arbitrary commands with root privileges via specially crafted UDP packets. This vulnerability can result in complete device compromise, allowing unauthorized command execution, modification of settings, and potential breaches of confidentiality, integrity, and availability. Organizations using Deco BE11000 devices should prioritize patching this vulnerability to mitigate the associated risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An OS command injection vulnerability in the TDDP module of Deco BE11000 allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet. Successful exploitation may lead to complete device compromise, including unauthorized command execution, modification of device settings, and loss of confidentiality, integrity, and availability