Name of the Vulnerable Software and Affected Versions:

FIRSTNUM JC21A-04 devices versions through 2.01ME/FN

Description:

An issue allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the `xml action.cgi?method=` endpoint.

Recommendations:

Update FIRSTNUM JC21A-04 devices to a version later than 2.01ME/FN.