UCHIDA YOKO wivia 5 OS Command Injection Vulnerability

A command injection vulnerability has been identified in all versions of wivia 5, a product by UCHIDA YOKO CO., LTD. This vulnerability allows a logged-in administrative user to execute arbitrary operating system commands.

Impact

Exploitation of this vulnerability enables logged-in administrative users to execute arbitrary OS commands on the affected device.

Remediation

Users are advised to stop using wivia 5, as it is no longer supported. Consider migrating to the successor product, wivia R+. For more information, visit the UCHIDA YOKO support page.