Opto 22 Groov Products Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the Opto 22 Groov Manage REST API, specifically in GRV-EPIC and groov RIO products, all versions prior to 4.0.3. The vulnerability allows an attacker with administrative privileges to inject arbitrary commands that are executed with root privileges. This exploitation occurs when a POST request is sent to a vulnerable endpoint, where the application improperly processes certain header values to construct command executions.

Impact

Exploitation of this vulnerability allows for arbitrary command execution with root privileges on the affected device.

Remediation

Opto 22 has released a patch for this vulnerability. Users are advised to upgrade to GRV-EPIC and groov RIO firmware version 4.0.3 or later. Additional information can be found on the Opto 22 website.