This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis β
Q1What is this vulnerability? (Essence + Consequences)
π¨ **Essence**: AVideo < 7.0 suffers from **OS Command Injection** via the `base64Url` GET parameter.β¦
π‘οΈ **Root Cause**: **CWE-78** (Improper Neutralization of Special Elements used in an OS Command). The flaw lies in failing to sanitize the `base64Url` input before passing it to the OS shell.
Q3Who is affected? (Versions/Components)
π¦ **Affected**: **WWBN AVideo-Encoder**. Specifically, all versions **prior to 7.0**. If you are running an older version, you are at risk.
Q4What can hackers do? (Privileges/Data)
π **Attacker Capabilities**: With **unauthenticated** access, hackers can run commands with the **same privileges as the web server process**.β¦
β‘ **Exploitation Threshold**: **LOW**. No authentication (PR:N) is required. Network access (AV:N) and low complexity (AC:L) make this extremely easy to exploit remotely.
Q6Is there a public Exp? (PoC/Wild Exploitation)
π **Public Exploit**: The provided data lists **no PoCs** (`pocs: []`). However, the severity (CVSS 9.8) suggests wild exploitation is likely imminent once details are reverse-engineered by the community.
Q7How to self-check? (Features/Scanning)
π **Self-Check**: Scan for AVideo instances. Check if the version is **< 7.0**. Look for the `base64Url` parameter in HTTP GET requests. Use DAST tools to test for command injection on this specific parameter.
Q8Is it fixed officially? (Patch/Mitigation)
β **Fix Status**: Yes, an official advisory exists (GHSA-9j26-99jh-v26q). The fix is to **upgrade to AVideo version 7.0 or later**. Check the GitHub security advisory for patch details.
Q9What if no patch? (Workaround)
π§ **No Patch Workaround**: If you cannot upgrade immediately, **block external access** to the AVideo interface via WAF or firewall rules.β¦
π₯ **Urgency**: **CRITICAL**. CVSS 9.8 + Unauthenticated + OS Command Injection = **Immediate Action Required**. Patch or isolate the server NOW to prevent total compromise.