The flaw originates from hidden functionality that allows a user authenticated over SSH and able to enter enable mode to execute arbitrary OS commands on the device. This capability delivers complete control of the underlying operating system, enabling modification of system files, installation of malware, or persistence of unauthorized control, and is categorized as CWE‑912. The impact is therefore severe, providing full remote code execution once credentials are obtained.

The affected products are Lite‑On Technology Corporation routers FF‑RFI078I4 and FF‑RFI079I4. No firmware version ranges are cited, so all current releases of these two models are potentially vulnerable until a patch is applied.

The CVSS score of 8.7 places the vulnerability in the high‑severity range. The EPSS score of less than 1% suggests a presently low probability of exploitation, but the flaw remains unlisted in CISA KEV. The most likely attack scenario requires possession of valid SSH credentials and the privilege to enter enable mode; this is inferred from the description. An attacker who satisfies these conditions can run any OS command with the user’s privileges, leading to device takeover, sabotage, or establishment of a backdoor. Given the high impact and the potential for catastrophic loss, the flaw should be addressed promptly.