Iolan Sts
Monthly
An authenticated OS command injection vulnerability exists in Perle IOLAN STS and SCS terminal servers running firmware versions prior to 6.0. An attacker with valid credentials can inject shell metacharacters through the restricted shell's 'ps' command when accessing the device via Telnet or SSH, escalating to root privileges and achieving full system compromise. No KEV status or EPSS data is currently available for this vulnerability.
An authenticated OS command injection vulnerability exists in Perle IOLAN STS and SCS terminal servers running firmware versions prior to 6.0. An attacker with valid credentials can inject shell metacharacters through the restricted shell's 'ps' command when accessing the device via Telnet or SSH, escalating to root privileges and achieving full system compromise. No KEV status or EPSS data is currently available for this vulnerability.