An OS command injection vulnerability in MyScreenTools v2.2.1.0 allows authenticated attackers to execute arbitrary system commands, posing a significant risk to system integrity and confidentiality.

The vulnerability is an OS command injection flaw located in the CMD() function within the GIFSicleTool component. An authenticated attacker can supply malicious file paths that are passed unsanitized to cmd.exe, resulting in remote code execution with the privileges of the application process.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands on the underlying host system. Given the CVSS score of 8.1, this flaw represents a high risk, potentially leading to full system compromise, unauthorized data access, and lateral movement within the network.

Immediate Action: Since no official patch is currently available, users should restrict access to the application to trusted users only and consider disabling the GIF compression feature if it is not business-critical.

Proactive Monitoring: Security teams should monitor system logs for suspicious process spawning, specifically looking for cmd.exe executions originating from the MyScreenTools application process.

Compensating Controls: Implement strict file system permissions for the service account running the application to limit the impact of potential command execution, and employ endpoint detection and response tools to identify anomalous command-line arguments.

Public Exploit Available: Yes, a published proof-of-concept exists in the researcher write-up referenced in the CVE record.

Due to the severity of this command injection flaw and the existence of a public proof-of-concept, immediate mitigation is required. Organizations should isolate the affected software and apply vendor security updates as soon as they become available to prevent unauthorized system access.