CVE-2017-14853

CVE-2017-14853 is a critical code injection vulnerability affecting the Orpak SiteOmat OrCU component in all versions prior to September 25, 2017. This flaw allows an unauthenticated attacker to execute arbitrary shell commands on the device by manipulating a search query. With a CVSS score of 9.8, this vulnerability poses a severe risk, enabling complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community attention with 11 mentions and media coverage, indicating its potential for future exploitation.