EUVD-2026-67292
GHSA-frm2-vmcc-vghq
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible web interface with low-privilege authenticated requirement, no scope change, and full system impact across confidentiality, integrity, and availability.
Primary rating from Vendor (icscert).
CVSS VectorVendor: icscert
Lifecycle Timeline
7DescriptionCVE.org
Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device compromise.
AnalysisAI
OS command injection in the Xiiaozet LK100W web-based management interface enables network-accessible, low-privilege authenticated attackers to execute arbitrary operating system commands with elevated privileges, resulting in potential full device compromise. Reported by ICS-CERT under advisory ICSA-26-239-01 and scored CVSS 4.0 at 8.7 (High), this is an OT/industrial device vulnerability with high confidentiality, integrity, and availability impact to the vulnerable system. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network-level access to the Xiiaozet LK100W web management interface (AV:N per CVSS 4.0) and a valid low-privilege account on that interface (PR:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 reflects network-accessible exploitation (AV:N), low attack complexity (AC:L), no special attack requirements (AT:N), a low privilege requirement (PR:L), and no required user interaction (UI:N), with full impact to the vulnerable system (VC:H/VI:H/VA:H) and no scope change to subsequent systems (SC:N/SI:N/SA:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult CISA ICS Advisory ICSA-26-239-01 at https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01 for vendor-specific patch guidance; patch available per vendor advisory, but an exact patched firmware version was not confirmed from the provided data - apply any firmware update released by Xiiaozet as the primary remediation. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a complete inventory of Xiiaozet LK100W devices across production networks and document their criticality to operational continuity. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Xiiaozet Lk100W
View allAuthentication bypass in the Xiiaozet LK100W administrative service lets remote unauthenticated attackers reach privileg
Authentication bypass in the Xiiaozet LK100W device lets a remote attacker invoke a critical management function with no
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today