Opto 22 GRV-EPIC and groov RIO

RISK EVALUATION Successful exploitation of this vulnerability could result in the execution of arbitrary shell commands with root privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

Opto 22 groov RIO 操作系统命令注入漏洞

The Opto 22 groov RIO is an industrial remote I/O module from Opto 22 USA. An operating system command injection vulnerability exists in the Opto 22 groov RIO that stems from the unsafe use of header value build commands, which could lead to remote code execution...

PT-2025-47634

Name of the Vulnerable Software and Affected Versions Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products affected versions not specified Description A flaw exists in the Opto22 Groov Manage REST API that could allow for remote code execution with root privileges. The issue arises whe...

CVE-2025-13087: Improper Neutralization of Special Elements used in an OS Command

A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code execution with root privileges. When a POST request is executed against the vulnerable endpoint, the application reads certain header details and unsafely uses these values to bui...