important · Edge / firmware
An adjacent unauthenticated caller can execute root commands across affected Digi DAL OS appliances.
Affects
Digi Accelerated Linux, the embedded operating system used across Digi cellular routers, gateways, console servers, USB device servers and industrial connectivity products.
A crafted POST reaches an operating-system command sink through the DAL OS web-administration interface; packet delivery on the adjacent network is required.
Detail and 3 sources
Digi has published corrected DAL OS releases for the affected gateway and device-server family.