CVE-2024-13129 | Roxy-WI up to 8.1.3 roxy.py action_service action/service os command injection

A vulnerability was found in Roxy-WI up to 8.1.3. It has been declared as critical. Affected by this vulnerability is the function action_service of the file app/modules/roxywi/roxy.py. The manipulation of the argument action/service leads to os command injection.

This vulnerability is known as CVE-2024-13129. The attack can be launched remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.