Legrand SMS PowerView OS Command Injection Vulnerability

A critical OS command injection vulnerability has been identified in Legrand SMS PowerView version 1.x. The issue arises from an unknown functionality that allows the manipulation of the 'redirect' argument, leading to the execution of arbitrary operating system commands. This vulnerability requires access to the local network for exploitation.

Impact

Exploitation of this vulnerability allows for OS command injection, where an attacker can execute arbitrary commands on the server or device running the affected software.