Z4Pro Firmware
Monthly
Command injection in ZSPACE Z4Pro+ firmware 1.0.0440024 allows an authenticated remote attacker to execute arbitrary OS commands by sending a crafted HTTP POST request to the `/v2/file/safe/close` endpoint, processed by the `zfilev2_api_CloseSafe` function without adequate input sanitization. The attack requires low-level authentication (PR:L per the CVSS 4.0 vector) but no user interaction, and a public proof-of-concept is available on GitHub. No public exploit is actively weaponized and no KEV listing exists, though the PoC lowers the bar for adversaries with network access to the device.
Command injection in ZSPACE Z4Pro+ 1.0.0440024 via the /v2/file/safe/open HTTP POST endpoint allows authenticated remote attackers to execute arbitrary commands with limited impact on confidentiality, integrity, and availability. The vulnerability affects the zfilev2_api_open function and has been publicly disclosed with exploit code available; however, the EPSS score of 0.38% (59th percentile) and CVSS scope constraint (SC:N) suggest limited real-world exploitation risk despite authenticated remote access capability.
Public command injection in ZSPACE Z4Pro+ firmware allows authenticated remote attackers to execute arbitrary commands via the zfilev2_api_SafeStatus function in the /v2/file/safe/status endpoint. Low CVSS base score (2.1) and EPSS (0.38%) reflect limited impact and low exploitation probability, but public POC code exists, increasing risk for targeted attacks. No evidence of active exploitation in the wild.
Command injection in ZSPACE Z4Pro+ firmware 1.0.0440024 allows an authenticated remote attacker to execute arbitrary OS commands by sending a crafted HTTP POST request to the `/v2/file/safe/close` endpoint, processed by the `zfilev2_api_CloseSafe` function without adequate input sanitization. The attack requires low-level authentication (PR:L per the CVSS 4.0 vector) but no user interaction, and a public proof-of-concept is available on GitHub. No public exploit is actively weaponized and no KEV listing exists, though the PoC lowers the bar for adversaries with network access to the device.
Command injection in ZSPACE Z4Pro+ 1.0.0440024 via the /v2/file/safe/open HTTP POST endpoint allows authenticated remote attackers to execute arbitrary commands with limited impact on confidentiality, integrity, and availability. The vulnerability affects the zfilev2_api_open function and has been publicly disclosed with exploit code available; however, the EPSS score of 0.38% (59th percentile) and CVSS scope constraint (SC:N) suggest limited real-world exploitation risk despite authenticated remote access capability.
Public command injection in ZSPACE Z4Pro+ firmware allows authenticated remote attackers to execute arbitrary commands via the zfilev2_api_SafeStatus function in the /v2/file/safe/status endpoint. Low CVSS base score (2.1) and EPSS (0.38%) reflect limited impact and low exploitation probability, but public POC code exists, increasing risk for targeted attacks. No evidence of active exploitation in the wild.