Qa Board
Monthly
OS command injection in the Samsung QA-Board backend allows unauthenticated remote attackers to execute arbitrary operating-system commands on the host running the service, yielding a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with full confidentiality, integrity and availability impact. The flaw, classified as CWE-78, affects all versions matched by the wildcard CPE cpe:2.3:a:samsung_open_source:qa-board:*:*:*:*:*:*:*:*, so no release line is known to be exempt. No public exploit code has been identified at time of analysis and the issue is not listed on CISA KEV, but the trivial remote/unauthenticated attack profile makes rapid patching the priority.
OS command injection in the Samsung QA-Board backend allows unauthenticated remote attackers to execute arbitrary operating-system commands on the host running the service, yielding a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with full confidentiality, integrity and availability impact. The flaw, classified as CWE-78, affects all versions matched by the wildcard CPE cpe:2.3:a:samsung_open_source:qa-board:*:*:*:*:*:*:*:*, so no release line is known to be exempt. No public exploit code has been identified at time of analysis and the issue is not listed on CISA KEV, but the trivial remote/unauthenticated attack profile makes rapid patching the priority.