An unauthenticated OS command injection vulnerability in openNDS allows remote attackers to execute arbitrary commands on the underlying system, posing a high security risk.

This vulnerability is caused by improper neutralization of special elements in the fas query parameter within the /opennds_preauth/ endpoint, which allows an unauthenticated attacker to inject and execute arbitrary OS commands.

The ability for an unauthenticated attacker to execute arbitrary OS commands represents a critical breach of system integrity and confidentiality. Given the CVSS score of 8.3, this flaw could lead to full system compromise, unauthorized data access, and potential lateral movement within the network, resulting in significant operational downtime and severe reputational damage.

Immediate Action: Upgrade openNDS to version 11.0.0 or later to ensure the vulnerable libopennds.sh component is patched.

Proactive Monitoring: Monitor network traffic and web server access logs for suspicious requests targeting the /opennds_preauth/ endpoint, specifically looking for shell metacharacters within the fas query parameter.

Compensating Controls: Implement strict input validation or use a Web Application Firewall (WAF) to block requests containing suspicious shell command sequences directed at the pre-authentication interface.

Public Exploit Available: No — there is no confirmed public exploit in the available data.

Due to the severity of this command injection vulnerability, administrators should prioritize the update to version 11.0.0 immediately. Organizations unable to patch should restrict network access to the /opennds_preauth/ endpoint to mitigate the risk of unauthorized command execution by remote actors.