Ff Rfi078I4
Monthly
Authenticated SSH users who can reach privileged 'enable' mode on Lite-On FF-RFI079I4 and FF-RFI078I4 5G FlexFi devices can invoke an undocumented hidden function (CWE-912) to execute arbitrary OS commands, giving full control of the appliance with high confidentiality, integrity, and availability impact. Firmware versions below 02.01.15 are affected and a vendor fix is available. No public exploit code and no CISA KEV entry were identified at time of analysis, and the vendor/JVN rates the issue CVSS 4.0 8.7 (PR:L, UI:N).
OS command injection in the Lite-On FlexFi 5G radio products FF-RFI079I4 and FF-RFI078I4 allows anyone who can authenticate to the device's M-Plane (NETCONF) management interface to run arbitrary operating-system commands with the privileges of the management service, leading to full compromise of the radio unit. Affected firmware is version 02.01.15 and earlier; Lite-On has released a fix. EPSS is low (1.03%, 62nd percentile) and CISA's SSVC rates exploitation as 'none' with automatable 'no', so this is currently a targeted-risk rather than a mass-exploitation issue, with no public exploit identified at time of analysis.
Authenticated SSH users who can reach privileged 'enable' mode on Lite-On FF-RFI079I4 and FF-RFI078I4 5G FlexFi devices can invoke an undocumented hidden function (CWE-912) to execute arbitrary OS commands, giving full control of the appliance with high confidentiality, integrity, and availability impact. Firmware versions below 02.01.15 are affected and a vendor fix is available. No public exploit code and no CISA KEV entry were identified at time of analysis, and the vendor/JVN rates the issue CVSS 4.0 8.7 (PR:L, UI:N).
OS command injection in the Lite-On FlexFi 5G radio products FF-RFI079I4 and FF-RFI078I4 allows anyone who can authenticate to the device's M-Plane (NETCONF) management interface to run arbitrary operating-system commands with the privileges of the management service, leading to full compromise of the radio unit. Affected firmware is version 02.01.15 and earlier; Lite-On has released a fix. EPSS is low (1.03%, 62nd percentile) and CISA's SSVC rates exploitation as 'none' with automatable 'no', so this is currently a targeted-risk rather than a mass-exploitation issue, with no public exploit identified at time of analysis.