A critical command injection vulnerability in various SOUND4 Ltd. products allows unauthenticated remote code execution, posing a severe risk to system integrity.

The application is susceptible to OS Command Injection via the dns.php script, which fails to properly sanitize input. Although the vulnerability allows authenticated users to create malicious files, unauthenticated attackers can leverage this mechanism through a single HTTP POST request to trigger code execution.

Successful exploitation grants an attacker the ability to execute arbitrary commands on the underlying host operating system. This level of access typically results in a total compromise of the affected appliance, potentially leading to unauthorized data exfiltration, lateral movement within the network, or permanent denial of service. The high CVSS score of 8.4 reflects the significant potential for impact on confidentiality, integrity, and availability.

Immediate Action: Contact the vendor immediately to obtain firmware or software patches, as no public fix is currently identified. If an update is unavailable, restrict network access to the management interface of the affected devices.

Proactive Monitoring: Monitor server access logs for unusual HTTP POST requests directed at the dns.php file. Review system logs for unexpected file creation activities in the /tmp directory, specifically targeting files with the .dns.pid extension.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block or sanitize POST requests containing suspicious shell metacharacters sent to the dns.php endpoint. Ensure the device is isolated behind a firewall to prevent direct exposure to untrusted networks.

Public Exploit Available: Yes, a published PoC exists, attributed to the technical documentation provided in the Packet Storm Security reference.

Given the availability of public proof-of-concept code and the high severity of command injection, this vulnerability represents a significant threat. Administrators must prioritize the isolation of affected devices from the public internet and coordinate with SOUND4 Ltd. support to verify if a patch or mitigation is available for their specific deployment. Failure to secure these endpoints could lead to a complete system compromise.