Critical · published February 11, 2026
🚨 An unauthenticated web shell at the /console endpoint puts your METIS WIC devices at risk! This means anyone can waltz right in and execute commands with full root access! 🔥 Imagine leaving the door to your tech's command center wide open, inviting anyone to rearrange your furniture, access confidential files, and even take control of your entire home. That's essentially what this vulnerability does — it opens the floodgates to mischief! The consequences are absolutely devastating; an attacker could not only read sensitive data but also modify system configurations or disrupt operations entirely. This could lead to a full system compromise, risking integrity and confidentiality. We're talking unauthorized access to everything your device manages, and that's no small matter!
Imagine leaving the door to your tech's command center wide open, inviting anyone to rearrange your furniture, access confidential files, and even take control of your entire home. That's essentially what this vulnerability does — it opens the floodgates to mischief! This vulnerability stems from the METIS WIC devices' web-based shell at the /console endpoint, which lacks required authentication, allowing remote attackers to execute arbitrary commands with root privileges (UID 0). As a result, the system is left wide open for exploitation.
The consequences are absolutely devastating; an attacker could not only read sensitive data but also modify system configurations or disrupt operations entirely. This could lead to a full system compromise, risking integrity and confidentiality. We're talking unauthorized access to everything your device manages, and that's no small matter! Patch your METIS WIC devices immediately to version 2.1.234-r19 or later to close this critical security gap. It’s vital to ensure that proper authentication measures are enabled and to conduct a thorough review of your device configurations. Don’t delay — every moment counts! You've got this! By following these steps, you can lock down your devices and boost their security in no time. 🛡️