MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows unauthorized remote attackers to reboot or execute other functions via the β/xml/system/control.xmlβ URL, using the GET request β?action=rebootβ for example.